Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2024-52963
Vulnerability from cvelistv5
Published
2025-01-14 14:08
Modified
2025-01-14 20:57
Severity ?
EPSS score ?
Summary
A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| psirt@fortinet.com | https://fortiguard.fortinet.com/psirt/FG-IR-24-373 | Vendor Advisory |
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Fortinet | FortiProxy |
Version: 7.4.0 ≤ 7.4.5 Version: 7.2.0 ≤ 7.2.13 Version: 7.0.0 ≤ 7.0.20 Version: 2.0.0 ≤ 2.0.14 |
|||||||||||
|
||||||||||||||
{ containers: { adp: [ { metrics: [ { other: { content: { id: "CVE-2024-52963", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "partial", }, ], role: "CISA Coordinator", timestamp: "2025-01-14T15:15:33.947500Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2025-01-14T20:57:21.296Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { cpes: [], defaultStatus: "unaffected", product: "FortiProxy", vendor: "Fortinet", versions: [ { lessThanOrEqual: "7.4.5", status: "affected", version: "7.4.0", versionType: "semver", }, { lessThanOrEqual: "7.2.13", status: "affected", version: "7.2.0", versionType: "semver", }, { lessThanOrEqual: "7.0.20", status: "affected", version: "7.0.0", versionType: "semver", }, { lessThanOrEqual: "2.0.14", status: "affected", version: "2.0.0", versionType: "semver", }, ], }, { cpes: [ "cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*", ], defaultStatus: "unaffected", product: "FortiOS", vendor: "Fortinet", versions: [ { status: "affected", version: "7.6.0", }, { lessThanOrEqual: "7.4.6", status: "affected", version: "7.4.0", versionType: "semver", }, { lessThanOrEqual: "7.2.10", status: "affected", version: "7.2.0", versionType: "semver", }, { lessThanOrEqual: "7.0.16", status: "affected", version: "7.0.0", versionType: "semver", }, { lessThanOrEqual: "6.4.15", status: "affected", version: "6.4.0", versionType: "semver", }, ], }, { cpes: [ "cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*", "cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*", ], defaultStatus: "unaffected", product: "FortiPAM", vendor: "Fortinet", versions: [ { lessThanOrEqual: "1.4.2", status: "affected", version: "1.4.0", versionType: "semver", }, { lessThanOrEqual: "1.3.1", status: "affected", version: "1.3.0", versionType: "semver", }, { status: "affected", version: "1.2.0", }, { lessThanOrEqual: "1.1.2", status: "affected", version: "1.1.0", versionType: "semver", }, { lessThanOrEqual: "1.0.3", status: "affected", version: "1.0.0", versionType: "semver", }, ], }, ], descriptions: [ { lang: "en", value: "A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.", }, ], metrics: [ { cvssV3_1: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 3.5, baseSeverity: "LOW", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:F/RL:W/RC:C", version: "3.1", }, format: "CVSS", }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-787", description: "Denial of service", lang: "en", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2025-01-14T14:08:31.001Z", orgId: "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", shortName: "fortinet", }, references: [ { name: "https://fortiguard.fortinet.com/psirt/FG-IR-24-373", url: "https://fortiguard.fortinet.com/psirt/FG-IR-24-373", }, ], solutions: [ { lang: "en", value: "Please upgrade to FortiOS version 7.6.1 or above", }, ], }, }, cveMetadata: { assignerOrgId: "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", assignerShortName: "fortinet", cveId: "CVE-2024-52963", datePublished: "2025-01-14T14:08:31.001Z", dateReserved: "2024-11-18T13:36:52.465Z", dateUpdated: "2025-01-14T20:57:21.296Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2024-52963\",\"sourceIdentifier\":\"psirt@fortinet.com\",\"published\":\"2025-01-14T14:15:33.807\",\"lastModified\":\"2025-02-03T21:56:00.043\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.\"},{\"lang\":\"es\",\"value\":\"Una escritura fuera de los límites en las versiones Fortinet FortiOS 7.6.0, 7.4.0 a 7.4.6, 7.2.0 a 7.2.10, 7.0.0 a 7.0.16, 6.4.0 a 6.4.15 permite a un atacante activar una denegación de servicio a través de paquetes especialmente manipulados.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@fortinet.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":3.7,\"baseSeverity\":\"LOW\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.2,\"impactScore\":1.4},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"psirt@fortinet.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.4.0\",\"versionEndExcluding\":\"7.6.1\",\"matchCriteriaId\":\"84DD8626-BB61-4F9E-A339-DBEE0D071347\"}]}]}],\"references\":[{\"url\":\"https://fortiguard.fortinet.com/psirt/FG-IR-24-373\",\"source\":\"psirt@fortinet.com\",\"tags\":[\"Vendor Advisory\"]}]}}", vulnrichment: { containers: "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-52963\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-01-14T15:15:33.947500Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-01-14T15:15:35.431Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 3.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"LOW\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:F/RL:W/RC:C\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [], \"vendor\": \"Fortinet\", \"product\": \"FortiProxy\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.4.5\"}, {\"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.2.13\"}, {\"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.0.20\"}, {\"status\": \"affected\", \"version\": \"2.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"2.0.14\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*\"], \"vendor\": \"Fortinet\", \"product\": \"FortiOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.6.0\"}, {\"status\": \"affected\", \"version\": \"7.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.4.6\"}, {\"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.2.10\"}, {\"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.0.16\"}, {\"status\": \"affected\", \"version\": \"6.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.4.15\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"Fortinet\", \"product\": \"FortiPAM\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"1.4.2\"}, {\"status\": \"affected\", \"version\": \"1.3.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"1.3.1\"}, {\"status\": \"affected\", \"version\": \"1.2.0\"}, {\"status\": \"affected\", \"version\": \"1.1.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"1.1.2\"}, {\"status\": \"affected\", \"version\": \"1.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"1.0.3\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Please upgrade to FortiOS version 7.6.1 or above\"}], \"references\": [{\"url\": \"https://fortiguard.fortinet.com/psirt/FG-IR-24-373\", \"name\": \"https://fortiguard.fortinet.com/psirt/FG-IR-24-373\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"Denial of service\"}]}], \"providerMetadata\": {\"orgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"shortName\": \"fortinet\", \"dateUpdated\": \"2025-01-14T14:08:31.001Z\"}}}", cveMetadata: "{\"cveId\": \"CVE-2024-52963\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-01-14T20:57:21.296Z\", \"dateReserved\": \"2024-11-18T13:36:52.465Z\", \"assignerOrgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"datePublished\": \"2025-01-14T14:08:31.001Z\", \"assignerShortName\": \"fortinet\"}", dataType: "CVE_RECORD", dataVersion: "5.1", }, }, }
fkie_cve-2024-52963
Vulnerability from fkie_nvd
Published
2025-01-14 14:15
Modified
2025-02-03 21:56
Severity ?
3.7 (Low) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| psirt@fortinet.com | https://fortiguard.fortinet.com/psirt/FG-IR-24-373 | Vendor Advisory |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", matchCriteriaId: "84DD8626-BB61-4F9E-A339-DBEE0D071347", versionEndExcluding: "7.6.1", versionStartIncluding: "6.4.0", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.", }, { lang: "es", value: "Una escritura fuera de los límites en las versiones Fortinet FortiOS 7.6.0, 7.4.0 a 7.4.6, 7.2.0 a 7.2.10, 7.0.0 a 7.0.16, 6.4.0 a 6.4.15 permite a un atacante activar una denegación de servicio a través de paquetes especialmente manipulados.", }, ], id: "CVE-2024-52963", lastModified: "2025-02-03T21:56:00.043", metrics: { cvssMetricV31: [ { cvssData: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "LOW", baseScore: 3.7, baseSeverity: "LOW", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, exploitabilityScore: 2.2, impactScore: 1.4, source: "psirt@fortinet.com", type: "Secondary", }, { cvssData: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 5.9, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, exploitabilityScore: 2.2, impactScore: 3.6, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2025-01-14T14:15:33.807", references: [ { source: "psirt@fortinet.com", tags: [ "Vendor Advisory", ], url: "https://fortiguard.fortinet.com/psirt/FG-IR-24-373", }, ], sourceIdentifier: "psirt@fortinet.com", vulnStatus: "Analyzed", weaknesses: [ { description: [ { lang: "en", value: "CWE-787", }, ], source: "psirt@fortinet.com", type: "Primary", }, ], }
ghsa-2rg6-2x33-4cjj
Vulnerability from github
Published
2025-01-14 15:30
Modified
2025-01-14 15:30
Severity ?
Details
A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.
{ affected: [], aliases: [ "CVE-2024-52963", ], database_specific: { cwe_ids: [ "CWE-787", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2025-01-14T14:15:33Z", severity: "LOW", }, details: "A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.", id: "GHSA-2rg6-2x33-4cjj", modified: "2025-01-14T15:30:54Z", published: "2025-01-14T15:30:54Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2024-52963", }, { type: "WEB", url: "https://fortiguard.fortinet.com/psirt/FG-IR-24-373", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", type: "CVSS_V3", }, ], }
wid-sec-w-2025-0088
Vulnerability from csaf_certbund
Published
2025-01-14 23:00
Modified
2025-01-14 23:00
Summary
Fortinet FortiOS: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.
Angriff
Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Fortinet FortiOS ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen und einen Spoofing-Angriff zu starten.
Betroffene Betriebssysteme
- Sonstiges
{ document: { aggregate_severity: { text: "mittel", }, category: "csaf_base", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "de-DE", notes: [ { category: "legal_disclaimer", text: "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.", }, { category: "description", text: "FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.", title: "Produktbeschreibung", }, { category: "summary", text: "Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Fortinet FortiOS ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen und einen Spoofing-Angriff zu starten.", title: "Angriff", }, { category: "general", text: "- Sonstiges", title: "Betroffene Betriebssysteme", }, ], publisher: { category: "other", contact_details: "csaf-provider@cert-bund.de", name: "Bundesamt für Sicherheit in der Informationstechnik", namespace: "https://www.bsi.bund.de", }, references: [ { category: "self", summary: "WID-SEC-W-2025-0088 - CSAF Version", url: "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0088.json", }, { category: "self", summary: "WID-SEC-2025-0088 - Portal Version", url: "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0088", }, { category: "external", summary: "FortiGuard PSIRT Advisory FG-IR-23-473 vom 2025-01-14", url: "https://www.fortiguard.com/psirt/FG-IR-23-473", }, { category: "external", summary: "FortiGuard PSIRT Advisory FG-IR-24-326 vom 2025-01-14", url: "https://www.fortiguard.com/psirt/FG-IR-24-326", }, { category: "external", summary: "FortiGuard PSIRT Advisory FG-IR-24-250 vom 2025-01-14", url: "https://www.fortiguard.com/psirt/FG-IR-24-250", }, { category: "external", summary: "FortiGuard PSIRT Advisory FG-IR-24-219 vom 2025-01-14", url: "https://www.fortiguard.com/psirt/FG-IR-24-219", }, { category: "external", summary: "FortiGuard PSIRT Advisory FG-IR-24-267 vom 2025-01-14", url: "https://www.fortiguard.com/psirt/FG-IR-24-267", }, { category: "external", summary: "FortiGuard PSIRT Advisory FG-IR-24-266 vom 2025-01-14", url: "https://www.fortiguard.com/psirt/FG-IR-24-266", }, { category: "external", summary: "FortiGuard PSIRT Advisory FG-IR-23-407 vom 2025-01-14", url: "https://www.fortiguard.com/psirt/FG-IR-23-407", }, { category: "external", summary: "FortiGuard PSIRT Advisory FG-IR-23-293 vom 2025-01-14", url: "https://www.fortiguard.com/psirt/FG-IR-23-293", }, { category: "external", summary: "FortiGuard PSIRT Advisory FG-IR-24-373 vom 2025-01-14", url: "https://www.fortiguard.com/psirt/FG-IR-24-373", }, { category: "external", summary: "FortiGuard PSIRT Advisory FG-IR-24-282 vom 2025-01-14", url: "https://www.fortiguard.com/psirt/FG-IR-24-282", }, ], source_lang: "en-US", title: "Fortinet FortiOS: Mehrere Schwachstellen", tracking: { current_release_date: "2025-01-14T23:00:00.000+00:00", generator: { date: "2025-01-15T11:43:20.772+00:00", engine: { name: "BSI-WID", version: "1.3.10", }, }, id: "WID-SEC-W-2025-0088", initial_release_date: "2025-01-14T23:00:00.000+00:00", revision_history: [ { date: "2025-01-14T23:00:00.000+00:00", number: "1", summary: "Initiale Fassung", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "Fortinet FortiOS", product: { name: "Fortinet FortiOS", product_id: "T040170", product_identification_helper: { cpe: "cpe:/o:fortinet:fortios:-", }, }, }, ], category: "vendor", name: "Fortinet", }, ], }, vulnerabilities: [ { cve: "CVE-2023-42785", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Fortinet FortiOS. Diese Schwachstellen betreffen die GUI-, CLI- und SSL-VPN-Komponenten aufgrund verschiedener Sicherheitsprobleme, darunter eine Null-Zeiger-Dereferenz, Lese- und Schreibvorgänge außerhalb des zulässigen Bereichs, die zu Logikfehlern, Speichererschöpfung und Anwendungsabstürzen führen. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2023-42785", }, { cve: "CVE-2023-42786", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Fortinet FortiOS. Diese Schwachstellen betreffen die GUI-, CLI- und SSL-VPN-Komponenten aufgrund verschiedener Sicherheitsprobleme, darunter eine Null-Zeiger-Dereferenz, Lese- und Schreibvorgänge außerhalb des zulässigen Bereichs, die zu Logikfehlern, Speichererschöpfung und Anwendungsabstürzen führen. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2023-42786", }, { cve: "CVE-2024-36504", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Fortinet FortiOS. Diese Schwachstellen betreffen die GUI-, CLI- und SSL-VPN-Komponenten aufgrund verschiedener Sicherheitsprobleme, darunter eine Null-Zeiger-Dereferenz, Lese- und Schreibvorgänge außerhalb des zulässigen Bereichs, die zu Logikfehlern, Speichererschöpfung und Anwendungsabstürzen führen. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2024-36504", }, { cve: "CVE-2024-46666", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Fortinet FortiOS. Diese Schwachstellen betreffen die GUI-, CLI- und SSL-VPN-Komponenten aufgrund verschiedener Sicherheitsprobleme, darunter eine Null-Zeiger-Dereferenz, Lese- und Schreibvorgänge außerhalb des zulässigen Bereichs, die zu Logikfehlern, Speichererschöpfung und Anwendungsabstürzen führen. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2024-46666", }, { cve: "CVE-2024-46668", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Fortinet FortiOS. Diese Schwachstellen betreffen die GUI-, CLI- und SSL-VPN-Komponenten aufgrund verschiedener Sicherheitsprobleme, darunter eine Null-Zeiger-Dereferenz, Lese- und Schreibvorgänge außerhalb des zulässigen Bereichs, die zu Logikfehlern, Speichererschöpfung und Anwendungsabstürzen führen. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2024-46668", }, { cve: "CVE-2024-46669", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Fortinet FortiOS. Diese Schwachstellen betreffen die GUI-, CLI- und SSL-VPN-Komponenten aufgrund verschiedener Sicherheitsprobleme, darunter eine Null-Zeiger-Dereferenz, Lese- und Schreibvorgänge außerhalb des zulässigen Bereichs, die zu Logikfehlern, Speichererschöpfung und Anwendungsabstürzen führen. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2024-46669", }, { cve: "CVE-2024-46670", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Fortinet FortiOS. Diese Schwachstellen betreffen die GUI-, CLI- und SSL-VPN-Komponenten aufgrund verschiedener Sicherheitsprobleme, darunter eine Null-Zeiger-Dereferenz, Lese- und Schreibvorgänge außerhalb des zulässigen Bereichs, die zu Logikfehlern, Speichererschöpfung und Anwendungsabstürzen führen. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2024-46670", }, { cve: "CVE-2024-52963", notes: [ { category: "description", text: "Es bestehen mehrere Schwachstellen in Fortinet FortiOS. Diese Schwachstellen betreffen die GUI-, CLI- und SSL-VPN-Komponenten aufgrund verschiedener Sicherheitsprobleme, darunter eine Null-Zeiger-Dereferenz, Lese- und Schreibvorgänge außerhalb des zulässigen Bereichs, die zu Logikfehlern, Speichererschöpfung und Anwendungsabstürzen führen. Ein entfernter, anonymer oder authentisierter Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2024-52963", }, { cve: "CVE-2023-46715", notes: [ { category: "description", text: "Es besteht eine Schwachstelle in Fortinet FortiOS. Diese Schwachstelle betrifft das IPSec-VPN aufgrund eines Ursprungsvalidierungsfehlers, der IP-Spoofing ermöglicht. Ein entfernter, authentisierter Angreifer kann diese Schwachstelle ausnutzen, um die IP-Adresse eines anderen Benutzers zu fälschen, indem er manipulierte Netzwerkpakete sendet.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2023-46715", }, { cve: "CVE-2024-46665", notes: [ { category: "description", text: "Es besteht eine Schwachstelle in Fortinet FortiOS. Die Schwachstelle besteht aufgrund der Einfügung von sensiblen Informationen in übertragene Daten. Ein entfernter, anonymer Angreifer in einer Man-in-the-Middle-Position kann diese Schwachstelle ausnutzen, um das gemeinsame Geheimnis des RADIUS-Accounting-Servers offenzulegen, indem er Accounting-Anfragen abfängt.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2024-46665", }, { cve: "CVE-2024-54021", notes: [ { category: "description", text: "Es besteht eine Schwachstelle in Fortinet FortiOS aufgrund einer unsachgemäßen Neutralisierung von CRLF-Sequenzen in HTTP-Headern. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um den Dateifilter über manipulierte HTTP-Header zu umgehen.", }, ], product_status: { known_affected: [ "T040170", ], }, release_date: "2025-01-14T23:00:00.000+00:00", title: "CVE-2024-54021", }, ], }
ncsc-2025-0061
Vulnerability from csaf_ncscnl
Published
2025-02-14 08:46
Modified
2025-02-14 08:46
Summary
Kwetsbaarheden verholpen in Siemens producten
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Siemens heeft kwetsbaarheden verholpen in diverse producten als APOGEE, Opcenter, RUGGEDCOM, SCALANCE, SIMATIC, SIPROTEC en Teamcenter.
Interpretaties
De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:
- Denial-of-Service (DoS)
- Cross-Site-Scripting (XSS)
- Cross-Site Request Forgery (CSRF)
- Manipulatie van gegevens
- Omzeilen van een beveiligingsmaatregel
- Omzeilen van authenticatie
- (Remote) code execution (root/admin rechten)
- (Remote) code execution (Gebruikersrechten)
- Toegang tot systeemgegevens
- Toegang tot gevoelige gegevens
De kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.
Oplossingen
Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-1240
Use of a Cryptographic Primitive with a Risky Implementation
CWE-1325
Improperly Controlled Sequential Memory Allocation
CWE-468
Incorrect Pointer Scaling
CWE-606
Unchecked Input for Loop Condition
CWE-183
Permissive List of Allowed Inputs
CWE-385
Covert Timing Channel
CWE-1395
Dependency on Vulnerable Third-Party Component
CWE-170
Improper Null Termination
CWE-489
Active Debug Code
CWE-1392
Use of Default Credentials
CWE-222
Truncation of Security-relevant Information
CWE-310
CWE-310
CWE-328
Use of Weak Hash
CWE-304
Missing Critical Step in Authentication
CWE-684
Incorrect Provision of Specified Functionality
CWE-208
Observable Timing Discrepancy
CWE-326
Inadequate Encryption Strength
CWE-923
Improper Restriction of Communication Channel to Intended Endpoints
CWE-201
Insertion of Sensitive Information Into Sent Data
CWE-347
Improper Verification of Cryptographic Signature
CWE-834
Excessive Iteration
CWE-732
Incorrect Permission Assignment for Critical Resource
CWE-425
Direct Request ('Forced Browsing')
CWE-440
Expected Behavior Violation
CWE-704
Incorrect Type Conversion or Cast
CWE-415
Double Free
CWE-1286
Improper Validation of Syntactic Correctness of Input
CWE-754
Improper Check for Unusual or Exceptional Conditions
CWE-427
Uncontrolled Search Path Element
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')
CWE-610
Externally Controlled Reference to a Resource in Another Sphere
CWE-613
Insufficient Session Expiration
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
CWE-312
Cleartext Storage of Sensitive Information
CWE-369
Divide By Zero
CWE-252
Unchecked Return Value
CWE-203
Observable Discrepancy
CWE-354
Improper Validation of Integrity Check Value
CWE-325
Missing Cryptographic Step
CWE-190
Integer Overflow or Wraparound
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CWE-125
Out-of-bounds Read
CWE-404
Improper Resource Shutdown or Release
CWE-284
Improper Access Control
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-1333
Inefficient Regular Expression Complexity
CWE-416
Use After Free
CWE-113
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
CWE-401
Missing Release of Memory after Effective Lifetime
CWE-476
NULL Pointer Dereference
CWE-295
Improper Certificate Validation
CWE-757
Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
CWE-436
Interpretation Conflict
CWE-400
Uncontrolled Resource Consumption
{ document: { category: "csaf_security_advisory", csaf_version: "2.0", distribution: { tlp: { label: "WHITE", }, }, lang: "nl", notes: [ { category: "legal_disclaimer", text: "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.", }, { category: "description", text: "Siemens heeft kwetsbaarheden verholpen in diverse producten als APOGEE, Opcenter, RUGGEDCOM, SCALANCE, SIMATIC, SIPROTEC en Teamcenter.", title: "Feiten", }, { category: "description", text: "De kwetsbaarheden stellen een kwaadwillende mogelijk in staat aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade:\n\n- Denial-of-Service (DoS)\n- Cross-Site-Scripting (XSS)\n- Cross-Site Request Forgery (CSRF)\n- Manipulatie van gegevens\n- Omzeilen van een beveiligingsmaatregel\n- Omzeilen van authenticatie\n- (Remote) code execution (root/admin rechten)\n- (Remote) code execution (Gebruikersrechten)\n- Toegang tot systeemgegevens\n- Toegang tot gevoelige gegevens\n\nDe kwaadwillende heeft hiervoor toegang nodig tot de productieomgeving. Het is goed gebruik een dergelijke omgeving niet publiek toegankelijk te hebben.", title: "Interpretaties", }, { category: "description", text: "Siemens heeft beveiligingsupdates uitgebracht om de kwetsbaarheden te verhelpen. Voor de kwetsbaarheden waar nog geen updates voor zijn, heeft Siemens mitigerende maatregelen gepubliceerd om de risico's zoveel als mogelijk te beperken. Zie de bijgevoegde referenties voor meer informatie.", title: "Oplossingen", }, { category: "general", text: "medium", title: "Kans", }, { category: "general", text: "high", title: "Schade", }, { category: "general", text: "Use of a Cryptographic Primitive with a Risky Implementation", title: "CWE-1240", }, { category: "general", text: "Improperly Controlled Sequential Memory Allocation", title: "CWE-1325", }, { category: "general", text: "Incorrect Pointer Scaling", title: "CWE-468", }, { category: "general", text: "Unchecked Input for Loop Condition", title: "CWE-606", }, { category: "general", text: "Permissive List of Allowed Inputs", title: "CWE-183", }, { category: "general", text: "Covert Timing Channel", title: "CWE-385", }, { category: "general", text: "Dependency on Vulnerable Third-Party Component", title: "CWE-1395", }, { category: "general", text: "Improper Null Termination", title: "CWE-170", }, { category: "general", text: "Active Debug Code", title: "CWE-489", }, { category: "general", text: "Use of Default Credentials", title: "CWE-1392", }, { category: "general", text: "Truncation of Security-relevant Information", title: "CWE-222", }, { category: "general", text: "CWE-310", title: "CWE-310", }, { category: "general", text: "Use of Weak Hash", title: "CWE-328", }, { category: "general", text: "Missing Critical Step in Authentication", title: "CWE-304", }, { category: "general", text: "Incorrect Provision of Specified Functionality", title: "CWE-684", }, { category: "general", text: "Observable Timing Discrepancy", title: "CWE-208", }, { category: "general", text: "Inadequate Encryption Strength", title: "CWE-326", }, { category: "general", text: "Improper Restriction of Communication Channel to Intended Endpoints", title: "CWE-923", }, { category: "general", text: "Insertion of Sensitive Information Into Sent Data", title: "CWE-201", }, { category: "general", text: "Improper Verification of Cryptographic Signature", title: "CWE-347", }, { category: "general", text: "Excessive Iteration", title: "CWE-834", }, { category: "general", text: "Incorrect Permission Assignment for Critical Resource", title: "CWE-732", }, { category: "general", text: "Direct Request ('Forced Browsing')", title: "CWE-425", }, { category: "general", text: "Expected Behavior Violation", title: "CWE-440", }, { category: "general", text: "Incorrect Type Conversion or Cast", title: "CWE-704", }, { category: "general", text: "Double Free", title: "CWE-415", }, { category: "general", text: "Improper Validation of Syntactic Correctness of Input", title: "CWE-1286", }, { category: "general", text: "Improper Check for Unusual or Exceptional Conditions", title: "CWE-754", }, { category: "general", text: "Uncontrolled Search Path Element", title: "CWE-427", }, { category: "general", text: "URL Redirection to Untrusted Site ('Open Redirect')", title: "CWE-601", }, { category: "general", text: "Externally Controlled Reference to a Resource in Another Sphere", title: "CWE-610", }, { category: "general", text: "Insufficient Session Expiration", title: "CWE-613", }, { category: "general", text: "Access of Resource Using Incompatible Type ('Type Confusion')", title: "CWE-843", }, { category: "general", text: "Cleartext Storage of Sensitive Information", title: "CWE-312", }, { category: "general", text: "Divide By Zero", title: "CWE-369", }, { category: "general", text: "Unchecked Return Value", title: "CWE-252", }, { category: "general", text: "Observable Discrepancy", title: "CWE-203", }, { category: "general", text: "Improper Validation of Integrity Check Value", title: "CWE-354", }, { category: "general", text: "Missing Cryptographic Step", title: "CWE-325", }, { category: "general", text: "Integer Overflow or Wraparound", title: "CWE-190", }, { category: "general", text: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", title: "CWE-362", }, { category: "general", text: "Out-of-bounds Read", title: "CWE-125", }, { category: "general", text: "Improper Resource Shutdown or Release", title: "CWE-404", }, { category: "general", text: "Improper Access Control", title: "CWE-284", }, { category: "general", text: "Improper Restriction of Operations within the Bounds of a Memory Buffer", title: "CWE-119", }, { category: "general", text: "Inefficient Regular Expression Complexity", title: "CWE-1333", }, { category: "general", text: "Use After Free", title: "CWE-416", }, { category: "general", text: "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')", title: "CWE-113", }, { category: "general", text: "Missing Release of Memory after Effective Lifetime", title: "CWE-401", }, { category: "general", text: "NULL Pointer Dereference", title: "CWE-476", }, { category: "general", text: "Improper Certificate Validation", title: "CWE-295", }, { category: "general", text: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')", title: "CWE-757", }, { category: "general", text: "Use of a Broken or Risky Cryptographic Algorithm", title: "CWE-327", }, { category: "general", text: "Interpretation Conflict", title: "CWE-436", }, { category: "general", text: "Uncontrolled Resource Consumption", title: "CWE-400", }, ], publisher: { category: "coordinator", contact_details: "cert@ncsc.nl", name: "Nationaal Cyber Security Centrum", namespace: "https://www.ncsc.nl/", }, references: [ { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-111547.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-195895.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-224824.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-246355.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-342348.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-369369.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-615116.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-637914.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-647005.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-656895.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-687955.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-767615.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-769027.pdf", }, { category: "external", summary: "Reference - ncscclear", url: "https://cert-portal.siemens.com/productcert/pdf/ssa-770770.pdf", }, ], title: "Kwetsbaarheden verholpen in Siemens producten", tracking: { current_release_date: "2025-02-14T08:46:28.240775Z", id: "NCSC-2025-0061", initial_release_date: "2025-02-14T08:46:28.240775Z", revision_history: [ { date: "2025-02-14T08:46:28.240775Z", number: "0", summary: "Initiele versie", }, ], status: "final", version: "1.0.0", }, }, product_tree: { branches: [ { branches: [ { category: "product_name", name: "apogee_pxc_series__bacnet_", product: { name: "apogee_pxc_series__bacnet_", product_id: "CSAFPID-1702551", product_identification_helper: { cpe: "cpe:2.3:a:siemens:apogee_pxc_series__bacnet_:*:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "apogee_pxc_series__p2_ethernet_", product: { name: "apogee_pxc_series__p2_ethernet_", product_id: "CSAFPID-1702739", product_identification_helper: { cpe: "cpe:2.3:a:siemens:apogee_pxc_series__p2_ethernet_:*:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "opcenter_intelligence", product: { name: "opcenter_intelligence", product_id: "CSAFPID-1702007", product_identification_helper: { cpe: "cpe:2.3:a:siemens:opcenter_intelligence:*:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "opcenter_intelligence", product: { name: "opcenter_intelligence", product_id: "CSAFPID-1767245", product_identification_helper: { cpe: "cpe:2.3:a:siemens:opcenter_intelligence:2501:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "ruggedcom", product: { name: "ruggedcom", product_id: "CSAFPID-342615", product_identification_helper: { cpe: "cpe:2.3:a:siemens:ruggedcom:*:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "scalance", product: { name: "scalance", product_id: "CSAFPID-1769354", product_identification_helper: { cpe: "cpe:2.3:a:siemens:scalance:*:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "_simatic_s7", product: { name: "_simatic_s7", product_id: "CSAFPID-1769355", product_identification_helper: { cpe: "cpe:2.3:a:siemens:_simatic_s7:*:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "_simatic", product: { name: "_simatic", product_id: "CSAFPID-1769356", product_identification_helper: { cpe: "cpe:2.3:a:siemens:_simatic:*:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "simatic_s7", product: { name: "simatic_s7", product_id: "CSAFPID-1751507", product_identification_helper: { cpe: "cpe:2.3:a:siemens:simatic_s7:*:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "simatic", product: { name: "simatic", product_id: "CSAFPID-166121", product_identification_helper: { cpe: "cpe:2.3:a:siemens:simatic:*:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "siprotec", product: { name: "siprotec", product_id: "CSAFPID-1750039", product_identification_helper: { cpe: "cpe:2.3:a:siemens:siprotec:*:*:*:*:*:*:*:*", }, }, }, { category: "product_name", name: "teamcenter", product: { name: "teamcenter", product_id: "CSAFPID-538462", product_identification_helper: { cpe: "cpe:2.3:a:siemens:teamcenter:*:*:*:*:*:*:*:*", }, }, }, ], category: "vendor", name: "siemens", }, ], }, vulnerabilities: [ { cve: "CVE-2024-46665", cwe: { id: "CWE-201", name: "Insertion of Sensitive Information Into Sent Data", }, notes: [ { category: "other", text: "Insertion of Sensitive Information Into Sent Data", title: "CWE-201", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-46665", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46665.json", }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-46665", }, { cve: "CVE-2024-46666", cwe: { id: "CWE-770", name: "Allocation of Resources Without Limits or Throttling", }, notes: [ { category: "other", text: "Allocation of Resources Without Limits or Throttling", title: "CWE-770", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-46666", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46666.json", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-46666", }, { cve: "CVE-2024-46668", cwe: { id: "CWE-770", name: "Allocation of Resources Without Limits or Throttling", }, notes: [ { category: "other", text: "Allocation of Resources Without Limits or Throttling", title: "CWE-770", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-46668", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46668.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-46668", }, { cve: "CVE-2024-46669", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "other", text: "Integer Overflow or Wraparound", title: "CWE-190", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-46669", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46669.json", }, ], title: "CVE-2024-46669", }, { cve: "CVE-2024-46670", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "other", text: "Out-of-bounds Read", title: "CWE-125", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-46670", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-46670.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:X/RL:X/RC:X", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-46670", }, { cve: "CVE-2024-48884", cwe: { id: "CWE-22", name: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", }, notes: [ { category: "other", text: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", title: "CWE-22", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-48884", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-48884.json", }, ], title: "CVE-2024-48884", }, { cve: "CVE-2024-48885", cwe: { id: "CWE-22", name: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", }, notes: [ { category: "other", text: "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", title: "CWE-22", }, { category: "general", text: "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-48885", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-48885.json", }, ], title: "CVE-2024-48885", }, { cve: "CVE-2024-50560", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "other", text: "Improper Input Validation", title: "CWE-20", }, { category: "general", text: "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-50560", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50560.json", }, ], title: "CVE-2024-50560", }, { cve: "CVE-2024-50561", cwe: { id: "CWE-79", name: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", }, notes: [ { category: "other", text: "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", title: "CWE-79", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-50561", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50561.json", }, ], title: "CVE-2024-50561", }, { cve: "CVE-2024-50572", cwe: { id: "CWE-74", name: "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')", }, notes: [ { category: "other", text: "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')", title: "CWE-74", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-50572", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-50572.json", }, ], scores: [ { cvss_v3: { baseScore: 7.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-50572", }, { cve: "CVE-2024-52963", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-52963", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-52963.json", }, ], title: "CVE-2024-52963", }, { cve: "CVE-2024-53648", cwe: { id: "CWE-489", name: "Active Debug Code", }, notes: [ { category: "other", text: "Active Debug Code", title: "CWE-489", }, { category: "general", text: "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-53648", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-53648.json", }, ], scores: [ { cvss_v3: { baseScore: 6.8, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-53648", }, { cve: "CVE-2024-53651", cwe: { id: "CWE-312", name: "Cleartext Storage of Sensitive Information", }, notes: [ { category: "other", text: "Cleartext Storage of Sensitive Information", title: "CWE-312", }, { category: "general", text: "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-53651", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-53651.json", }, ], scores: [ { cvss_v3: { baseScore: 4.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-53651", }, { cve: "CVE-2024-53977", cwe: { id: "CWE-427", name: "Uncontrolled Search Path Element", }, notes: [ { category: "other", text: "Uncontrolled Search Path Element", title: "CWE-427", }, { category: "general", text: "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-53977", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-53977.json", }, ], title: "CVE-2024-53977", }, { cve: "CVE-2024-54015", cwe: { id: "CWE-1392", name: "Use of Default Credentials", }, notes: [ { category: "other", text: "Use of Default Credentials", title: "CWE-1392", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-54015", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54015.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-54015", }, { cve: "CVE-2024-54021", cwe: { id: "CWE-113", name: "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')", }, notes: [ { category: "other", text: "Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')", title: "CWE-113", }, { category: "other", text: "Interpretation Conflict", title: "CWE-436", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-54021", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54021.json", }, ], title: "CVE-2024-54021", }, { cve: "CVE-2024-54089", cwe: { id: "CWE-326", name: "Inadequate Encryption Strength", }, notes: [ { category: "other", text: "Inadequate Encryption Strength", title: "CWE-326", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-54089", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54089.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-54089", }, { cve: "CVE-2024-54090", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "other", text: "Out-of-bounds Read", title: "CWE-125", }, { category: "general", text: "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-54090", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54090.json", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-54090", }, { cve: "CVE-2025-23363", cwe: { id: "CWE-601", name: "URL Redirection to Untrusted Site ('Open Redirect')", }, notes: [ { category: "other", text: "URL Redirection to Untrusted Site ('Open Redirect')", title: "CWE-601", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2025-23363", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23363.json", }, ], scores: [ { cvss_v3: { baseScore: 7.4, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2025-23363", }, { cve: "CVE-2025-23403", cwe: { id: "CWE-732", name: "Incorrect Permission Assignment for Critical Resource", }, notes: [ { category: "other", text: "Incorrect Permission Assignment for Critical Resource", title: "CWE-732", }, { category: "general", text: "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2025-23403", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23403.json", }, ], scores: [ { cvss_v3: { baseScore: 7, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2025-23403", }, { cve: "CVE-2025-24499", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "other", text: "Improper Input Validation", title: "CWE-20", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2025-24499", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24499.json", }, ], scores: [ { cvss_v3: { baseScore: 7.2, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2025-24499", }, { cve: "CVE-2025-24532", cwe: { id: "CWE-284", name: "Improper Access Control", }, notes: [ { category: "other", text: "Improper Access Control", title: "CWE-284", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2025-24532", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24532.json", }, ], title: "CVE-2025-24532", }, { cve: "CVE-2025-24811", cwe: { id: "CWE-404", name: "Improper Resource Shutdown or Release", }, notes: [ { category: "other", text: "Improper Resource Shutdown or Release", title: "CWE-404", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2025-24811", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24811.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2025-24811", }, { cve: "CVE-2025-24812", cwe: { id: "CWE-1286", name: "Improper Validation of Syntactic Correctness of Input", }, notes: [ { category: "other", text: "Improper Validation of Syntactic Correctness of Input", title: "CWE-1286", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2025-24812", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24812.json", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2025-24812", }, { cve: "CVE-2025-24956", cwe: { id: "CWE-120", name: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", }, notes: [ { category: "other", text: "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", title: "CWE-120", }, { category: "general", text: "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2025-24956", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24956.json", }, ], scores: [ { cvss_v3: { baseScore: 6.2, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2025-24956", }, { cve: "CVE-2022-2588", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "other", text: "Use After Free", title: "CWE-416", }, { category: "other", text: "Improper Input Validation", title: "CWE-20", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-2588", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-2588.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2022-2588", }, { cve: "CVE-2022-2663", cwe: { id: "CWE-923", name: "Improper Restriction of Communication Channel to Intended Endpoints", }, notes: [ { category: "other", text: "Improper Restriction of Communication Channel to Intended Endpoints", title: "CWE-923", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-2663", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-2663.json", }, ], title: "CVE-2022-2663", }, { cve: "CVE-2022-3524", cwe: { id: "CWE-404", name: "Improper Resource Shutdown or Release", }, notes: [ { category: "other", text: "Improper Resource Shutdown or Release", title: "CWE-404", }, { category: "other", text: "Missing Release of Memory after Effective Lifetime", title: "CWE-401", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-3524", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-3524.json", }, ], title: "CVE-2022-3524", }, { cve: "CVE-2022-4304", cwe: { id: "CWE-326", name: "Inadequate Encryption Strength", }, notes: [ { category: "other", text: "Inadequate Encryption Strength", title: "CWE-326", }, { category: "other", text: "Observable Timing Discrepancy", title: "CWE-208", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-4304", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-4304.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2022-4304", }, { cve: "CVE-2022-4450", cwe: { id: "CWE-415", name: "Double Free", }, notes: [ { category: "other", text: "Double Free", title: "CWE-415", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-4450", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-4450.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2022-4450", }, { cve: "CVE-2022-22127", product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-22127", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-22127.json", }, ], scores: [ { cvss_v3: { baseScore: 7.7, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2022-22127", }, { cve: "CVE-2022-22128", product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-22128", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-22128.json", }, ], scores: [ { cvss_v3: { baseScore: 9, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2022-22128", }, { cve: "CVE-2022-39188", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "other", text: "Use After Free", title: "CWE-416", }, { category: "other", text: "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", title: "CWE-362", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-39188", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-39188.json", }, ], title: "CVE-2022-39188", }, { cve: "CVE-2022-39842", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, notes: [ { category: "other", text: "Heap-based Buffer Overflow", title: "CWE-122", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-39842", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-39842.json", }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2022-39842", }, { cve: "CVE-2022-40303", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "other", text: "Integer Overflow or Wraparound", title: "CWE-190", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-40303", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-40303.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2022-40303", }, { cve: "CVE-2022-40304", cwe: { id: "CWE-415", name: "Double Free", }, notes: [ { category: "other", text: "Double Free", title: "CWE-415", }, { category: "other", text: "Improper Restriction of XML External Entity Reference", title: "CWE-611", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-40304", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-40304.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2022-40304", }, { cve: "CVE-2022-43750", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-43750", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-43750.json", }, ], title: "CVE-2022-43750", }, { cve: "CVE-2022-47069", product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-47069", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-47069.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2022-47069", }, { cve: "CVE-2022-47929", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "other", text: "NULL Pointer Dereference", title: "CWE-476", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2022-47929", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2022/CVE-2022-47929.json", }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2022-47929", }, { cve: "CVE-2023-0045", cwe: { id: "CWE-610", name: "Externally Controlled Reference to a Resource in Another Sphere", }, notes: [ { category: "other", text: "Externally Controlled Reference to a Resource in Another Sphere", title: "CWE-610", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-0045", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0045.json", }, ], title: "CVE-2023-0045", }, { cve: "CVE-2023-0215", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "other", text: "Use After Free", title: "CWE-416", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-0215", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0215.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-0215", }, { cve: "CVE-2023-0286", cwe: { id: "CWE-704", name: "Incorrect Type Conversion or Cast", }, notes: [ { category: "other", text: "Incorrect Type Conversion or Cast", title: "CWE-704", }, { category: "other", text: "Improper Input Validation", title: "CWE-20", }, { category: "other", text: "Access of Resource Using Incompatible Type ('Type Confusion')", title: "CWE-843", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-0286", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0286.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-0286", }, { cve: "CVE-2023-0464", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, notes: [ { category: "other", text: "Improper Certificate Validation", title: "CWE-295", }, { category: "other", text: "Improper Resource Shutdown or Release", title: "CWE-404", }, { category: "other", text: "Uncontrolled Resource Consumption", title: "CWE-400", }, { category: "other", text: "Improper Verification of Cryptographic Signature", title: "CWE-347", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-0464", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0464.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-0464", }, { cve: "CVE-2023-0465", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, notes: [ { category: "other", text: "Improper Certificate Validation", title: "CWE-295", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-0465", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0465.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-0465", }, { cve: "CVE-2023-0466", cwe: { id: "CWE-295", name: "Improper Certificate Validation", }, notes: [ { category: "other", text: "Improper Certificate Validation", title: "CWE-295", }, { category: "other", text: "Improper Verification of Cryptographic Signature", title: "CWE-347", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-0466", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0466.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-0466", }, { cve: "CVE-2023-0590", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "other", text: "Use After Free", title: "CWE-416", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-0590", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-0590.json", }, ], scores: [ { cvss_v3: { baseScore: 7, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-0590", }, { cve: "CVE-2023-1073", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, { category: "other", text: "Improper Restriction of Operations within the Bounds of a Memory Buffer", title: "CWE-119", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-1073", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-1073.json", }, ], scores: [ { cvss_v3: { baseScore: 6.6, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-1073", }, { cve: "CVE-2023-1074", cwe: { id: "CWE-401", name: "Missing Release of Memory after Effective Lifetime", }, notes: [ { category: "other", text: "Missing Release of Memory after Effective Lifetime", title: "CWE-401", }, { category: "other", text: "Uncontrolled Resource Consumption", title: "CWE-400", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-1074", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-1074.json", }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-1074", }, { cve: "CVE-2023-1118", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "other", text: "Use After Free", title: "CWE-416", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-1118", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-1118.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-1118", }, { cve: "CVE-2023-1206", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, notes: [ { category: "other", text: "Uncontrolled Resource Consumption", title: "CWE-400", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-1206", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-1206.json", }, ], scores: [ { cvss_v3: { baseScore: 5.7, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-1206", }, { cve: "CVE-2023-1380", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "other", text: "Out-of-bounds Read", title: "CWE-125", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-1380", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-1380.json", }, ], scores: [ { cvss_v3: { baseScore: 7.1, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-1380", }, { cve: "CVE-2023-1670", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "other", text: "Use After Free", title: "CWE-416", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-1670", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-1670.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-1670", }, { cve: "CVE-2023-2194", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-2194", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-2194.json", }, ], scores: [ { cvss_v3: { baseScore: 6.7, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-2194", }, { cve: "CVE-2023-3446", cwe: { id: "CWE-404", name: "Improper Resource Shutdown or Release", }, notes: [ { category: "other", text: "Improper Resource Shutdown or Release", title: "CWE-404", }, { category: "other", text: "Uncontrolled Resource Consumption", title: "CWE-400", }, { category: "other", text: "Inefficient Regular Expression Complexity", title: "CWE-1333", }, { category: "other", text: "Unchecked Input for Loop Condition", title: "CWE-606", }, { category: "other", text: "Use of a Cryptographic Primitive with a Risky Implementation", title: "CWE-1240", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-3446", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-3446.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-3446", }, { cve: "CVE-2023-3611", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-3611", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-3611.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-3611", }, { cve: "CVE-2023-4623", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "other", text: "Use After Free", title: "CWE-416", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-4623", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4623.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-4623", }, { cve: "CVE-2023-4921", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "other", text: "Use After Free", title: "CWE-416", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-4921", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-4921.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-4921", }, { cve: "CVE-2023-5363", cwe: { id: "CWE-325", name: "Missing Cryptographic Step", }, notes: [ { category: "other", text: "Missing Cryptographic Step", title: "CWE-325", }, { category: "other", text: "Improper Input Validation", title: "CWE-20", }, { category: "other", text: "Incorrect Provision of Specified Functionality", title: "CWE-684", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-5363", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5363.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-5363", }, { cve: "CVE-2023-5678", cwe: { id: "CWE-754", name: "Improper Check for Unusual or Exceptional Conditions", }, notes: [ { category: "other", text: "Improper Check for Unusual or Exceptional Conditions", title: "CWE-754", }, { category: "other", text: "Missing Cryptographic Step", title: "CWE-325", }, { category: "other", text: "Unchecked Input for Loop Condition", title: "CWE-606", }, { category: "other", text: "Improper Input Validation", title: "CWE-20", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-5678", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5678.json", }, ], title: "CVE-2023-5678", }, { cve: "CVE-2023-5717", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-5717", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-5717.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-5717", }, { cve: "CVE-2023-6129", cwe: { id: "CWE-328", name: "Use of Weak Hash", }, notes: [ { category: "other", text: "Use of Weak Hash", title: "CWE-328", }, { category: "other", text: "Expected Behavior Violation", title: "CWE-440", }, { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, { category: "other", text: "Use of a Broken or Risky Cryptographic Algorithm", title: "CWE-327", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-6129", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6129.json", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-6129", }, { cve: "CVE-2023-6237", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, notes: [ { category: "other", text: "Uncontrolled Resource Consumption", title: "CWE-400", }, { category: "other", text: "Unchecked Input for Loop Condition", title: "CWE-606", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-6237", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-6237.json", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-6237", }, { cve: "CVE-2023-7250", cwe: { id: "CWE-183", name: "Permissive List of Allowed Inputs", }, notes: [ { category: "other", text: "Permissive List of Allowed Inputs", title: "CWE-183", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-7250", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-7250.json", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-7250", }, { cve: "CVE-2023-23454", cwe: { id: "CWE-843", name: "Access of Resource Using Incompatible Type ('Type Confusion')", }, notes: [ { category: "other", text: "Access of Resource Using Incompatible Type ('Type Confusion')", title: "CWE-843", }, { category: "other", text: "Out-of-bounds Read", title: "CWE-125", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-23454", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-23454.json", }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-23454", }, { cve: "CVE-2023-23455", cwe: { id: "CWE-843", name: "Access of Resource Using Incompatible Type ('Type Confusion')", }, notes: [ { category: "other", text: "Access of Resource Using Incompatible Type ('Type Confusion')", title: "CWE-843", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-23455", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-23455.json", }, ], title: "CVE-2023-23455", }, { cve: "CVE-2023-23559", cwe: { id: "CWE-190", name: "Integer Overflow or Wraparound", }, notes: [ { category: "other", text: "Integer Overflow or Wraparound", title: "CWE-190", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-23559", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-23559.json", }, ], scores: [ { cvss_v3: { baseScore: 7.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-23559", }, { cve: "CVE-2023-26545", cwe: { id: "CWE-415", name: "Double Free", }, notes: [ { category: "other", text: "Double Free", title: "CWE-415", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-26545", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-26545.json", }, ], title: "CVE-2023-26545", }, { cve: "CVE-2023-28484", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "other", text: "Improper Input Validation", title: "CWE-20", }, { category: "other", text: "NULL Pointer Dereference", title: "CWE-476", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-28484", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-28484.json", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-28484", }, { cve: "CVE-2023-28578", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "other", text: "Improper Restriction of Operations within the Bounds of a Memory Buffer", title: "CWE-119", }, { category: "other", text: "Improper Input Validation", title: "CWE-20", }, { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-28578", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-28578.json", }, ], scores: [ { cvss_v3: { baseScore: 9.3, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-28578", }, { cve: "CVE-2023-29469", cwe: { id: "CWE-20", name: "Improper Input Validation", }, notes: [ { category: "other", text: "Improper Input Validation", title: "CWE-20", }, { category: "other", text: "Double Free", title: "CWE-415", }, { category: "other", text: "Improper Null Termination", title: "CWE-170", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-29469", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-29469.json", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-29469", }, { cve: "CVE-2023-31085", cwe: { id: "CWE-369", name: "Divide By Zero", }, notes: [ { category: "other", text: "Divide By Zero", title: "CWE-369", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-31085", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-31085.json", }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-31085", }, { cve: "CVE-2023-31315", notes: [ { category: "general", text: "CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-31315", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-31315.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-31315", }, { cve: "CVE-2023-35001", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "other", text: "Out-of-bounds Read", title: "CWE-125", }, { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, { category: "other", text: "Incorrect Pointer Scaling", title: "CWE-468", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-35001", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-35001.json", }, ], title: "CVE-2023-35001", }, { cve: "CVE-2023-37482", cwe: { id: "CWE-203", name: "Observable Discrepancy", }, notes: [ { category: "other", text: "Observable Discrepancy", title: "CWE-203", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-37482", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-37482.json", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-37482", }, { cve: "CVE-2023-39192", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "other", text: "Out-of-bounds Read", title: "CWE-125", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-39192", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-39192.json", }, ], scores: [ { cvss_v3: { baseScore: 6.7, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-39192", }, { cve: "CVE-2023-39193", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "other", text: "Out-of-bounds Read", title: "CWE-125", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-39193", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-39193.json", }, ], scores: [ { cvss_v3: { baseScore: 6.1, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-39193", }, { cve: "CVE-2023-42754", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "other", text: "NULL Pointer Dereference", title: "CWE-476", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-42754", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-42754.json", }, ], scores: [ { cvss_v3: { baseScore: 5.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-42754", }, { cve: "CVE-2023-43522", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "other", text: "NULL Pointer Dereference", title: "CWE-476", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-43522", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-43522.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-43522", }, { cve: "CVE-2023-44320", cwe: { id: "CWE-425", name: "Direct Request ('Forced Browsing')", }, notes: [ { category: "other", text: "Direct Request ('Forced Browsing')", title: "CWE-425", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-44320", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-44320.json", }, ], scores: [ { cvss_v3: { baseScore: 4.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-44320", }, { cve: "CVE-2023-44322", cwe: { id: "CWE-252", name: "Unchecked Return Value", }, notes: [ { category: "other", text: "Unchecked Return Value", title: "CWE-252", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-44322", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-44322.json", }, ], scores: [ { cvss_v3: { baseScore: 3.7, baseSeverity: "LOW", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-44322", }, { cve: "CVE-2023-45853", cwe: { id: "CWE-122", name: "Heap-based Buffer Overflow", }, notes: [ { category: "other", text: "Heap-based Buffer Overflow", title: "CWE-122", }, { category: "other", text: "Integer Overflow or Wraparound", title: "CWE-190", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-45853", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-45853.json", }, ], scores: [ { cvss_v3: { baseScore: 9.8, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-45853", }, { cve: "CVE-2023-45863", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-45863", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-45863.json", }, ], scores: [ { cvss_v3: { baseScore: 6.4, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-45863", }, { cve: "CVE-2023-46604", cwe: { id: "CWE-502", name: "Deserialization of Untrusted Data", }, notes: [ { category: "other", text: "Deserialization of Untrusted Data", title: "CWE-502", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-46604", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-46604.json", }, ], scores: [ { cvss_v3: { baseScore: 10, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-46604", }, { cve: "CVE-2023-48795", cwe: { id: "CWE-222", name: "Truncation of Security-relevant Information", }, notes: [ { category: "other", text: "Truncation of Security-relevant Information", title: "CWE-222", }, { category: "other", text: "Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')", title: "CWE-757", }, { category: "other", text: "Improper Validation of Integrity Check Value", title: "CWE-354", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-48795", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-48795.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-48795", }, { cve: "CVE-2023-51384", cwe: { id: "CWE-304", name: "Missing Critical Step in Authentication", }, notes: [ { category: "other", text: "Missing Critical Step in Authentication", title: "CWE-304", }, { category: "other", text: "Improper Input Validation", title: "CWE-20", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-51384", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-51384.json", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-51384", }, { cve: "CVE-2023-51385", cwe: { id: "CWE-78", name: "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", }, notes: [ { category: "other", text: "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", title: "CWE-78", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2023-51385", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2023/CVE-2023-51385.json", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2023-51385", }, { cve: "CVE-2024-0727", cwe: { id: "CWE-476", name: "NULL Pointer Dereference", }, notes: [ { category: "other", text: "NULL Pointer Dereference", title: "CWE-476", }, { category: "other", text: "Improper Input Validation", title: "CWE-20", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-0727", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-0727.json", }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-0727", }, { cve: "CVE-2024-2511", cwe: { id: "CWE-404", name: "Improper Resource Shutdown or Release", }, notes: [ { category: "other", text: "Improper Resource Shutdown or Release", title: "CWE-404", }, { category: "other", text: "Uncontrolled Resource Consumption", title: "CWE-400", }, { category: "other", text: "Improperly Controlled Sequential Memory Allocation", title: "CWE-1325", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-2511", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-2511.json", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-2511", }, { cve: "CVE-2024-4603", cwe: { id: "CWE-606", name: "Unchecked Input for Loop Condition", }, notes: [ { category: "other", text: "Unchecked Input for Loop Condition", title: "CWE-606", }, { category: "other", text: "Excessive Iteration", title: "CWE-834", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-4603", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4603.json", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-4603", }, { cve: "CVE-2024-4741", cwe: { id: "CWE-416", name: "Use After Free", }, notes: [ { category: "other", text: "Use After Free", title: "CWE-416", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-4741", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-4741.json", }, ], title: "CVE-2024-4741", }, { cve: "CVE-2024-5535", cwe: { id: "CWE-200", name: "Exposure of Sensitive Information to an Unauthorized Actor", }, notes: [ { category: "other", text: "Exposure of Sensitive Information to an Unauthorized Actor", title: "CWE-200", }, { category: "other", text: "Improper Restriction of Operations within the Bounds of a Memory Buffer", title: "CWE-119", }, { category: "other", text: "Dependency on Vulnerable Third-Party Component", title: "CWE-1395", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-5535", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-5535.json", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-5535", }, { cve: "CVE-2024-6119", cwe: { id: "CWE-843", name: "Access of Resource Using Incompatible Type ('Type Confusion')", }, notes: [ { category: "other", text: "Access of Resource Using Incompatible Type ('Type Confusion')", title: "CWE-843", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-6119", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-6119.json", }, ], scores: [ { cvss_v3: { baseScore: 9.1, baseSeverity: "CRITICAL", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-6119", }, { cve: "CVE-2024-9143", cwe: { id: "CWE-787", name: "Out-of-bounds Write", }, notes: [ { category: "other", text: "Out-of-bounds Write", title: "CWE-787", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-9143", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-9143.json", }, ], title: "CVE-2024-9143", }, { cve: "CVE-2024-23814", cwe: { id: "CWE-400", name: "Uncontrolled Resource Consumption", }, notes: [ { category: "other", text: "Uncontrolled Resource Consumption", title: "CWE-400", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-23814", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-23814.json", }, ], scores: [ { cvss_v3: { baseScore: 5.3, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-23814", }, { cve: "CVE-2024-26306", cwe: { id: "CWE-310", name: "-", }, notes: [ { category: "other", text: "CWE-310", title: "CWE-310", }, { category: "other", text: "Observable Discrepancy", title: "CWE-203", }, { category: "other", text: "Covert Timing Channel", title: "CWE-385", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-26306", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-26306.json", }, ], scores: [ { cvss_v3: { baseScore: 5.9, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-26306", }, { cve: "CVE-2024-33016", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, notes: [ { category: "other", text: "Improper Restriction of Operations within the Bounds of a Memory Buffer", title: "CWE-119", }, { category: "general", text: "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-33016", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-33016.json", }, ], scores: [ { cvss_v3: { baseScore: 6.8, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-33016", }, { cve: "CVE-2024-36504", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, notes: [ { category: "other", text: "Out-of-bounds Read", title: "CWE-125", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-36504", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-36504.json", }, ], scores: [ { cvss_v3: { baseScore: 6.5, baseSeverity: "MEDIUM", vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-36504", }, { cve: "CVE-2024-45386", cwe: { id: "CWE-613", name: "Insufficient Session Expiration", }, notes: [ { category: "other", text: "Insufficient Session Expiration", title: "CWE-613", }, { category: "general", text: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", title: "CVSSV4", }, ], product_status: { known_affected: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, references: [ { category: "self", summary: "CVE-2024-45386", url: "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-45386.json", }, ], scores: [ { cvss_v3: { baseScore: 8.8, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, products: [ "CSAFPID-1702551", "CSAFPID-1702739", "CSAFPID-1702007", "CSAFPID-1767245", "CSAFPID-342615", "CSAFPID-1769354", "CSAFPID-1769355", "CSAFPID-1769356", "CSAFPID-1751507", "CSAFPID-166121", "CSAFPID-1750039", "CSAFPID-538462", ], }, ], title: "CVE-2024-45386", }, ], }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.