var-201405-0281
Vulnerability from variot
Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program. Emerson DeltaV is a digital automation system from Emerson, USA. The system provides I/O on-demand configuration, embedded intelligent control and alarm panel functions. Emerson DeltaV has a security bypass vulnerability. Attackers can exploit this issue to bypass the authentication mechanism and gain access to the vulnerable application. Emerson DeltaV versions 10.3.1, 11.3, 11.3.1, and 12.3 are vulnerable. DeltaV Versions 10.3.1, 11.3, 11.3.1, and 12.3 Can be related to Emerson AMS Device Management version, Emerson AMS Wireless SNAP-ON also.
CVE-2014-2349 - World writable system folder CVE-2014-2350 - Hardcoded credentials
Please find fixes in KBA NK-1400-0031.
Kudos: Kirill Nesterov, Alexander Tlyapov, Dmitry Nagibin, Alexey Osipov and Timur Yunusov
http://www.scadastrangelove.blogspot.com/2014/05/emerson-deltav-vulnerabilitiesfixes.html
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201405-0281",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "deltav",
"scope": "eq",
"trust": 3.3,
"vendor": "emerson",
"version": "10.3.1"
},
{
"model": "deltav",
"scope": "eq",
"trust": 3.3,
"vendor": "emerson",
"version": "11.3"
},
{
"model": "deltav",
"scope": "eq",
"trust": 3.3,
"vendor": "emerson",
"version": "11.3.1"
},
{
"model": "deltav",
"scope": "eq",
"trust": 3.3,
"vendor": "emerson",
"version": "12.3"
},
{
"model": null,
"scope": "eq",
"trust": 0.6,
"vendor": "deltav",
"version": "10.3.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.6,
"vendor": "deltav",
"version": "11.3"
},
{
"model": null,
"scope": "eq",
"trust": 0.6,
"vendor": "deltav",
"version": "11.3.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.6,
"vendor": "deltav",
"version": "12.3"
}
],
"sources": [
{
"db": "IVD",
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "f73024e8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2014-03278"
},
{
"db": "BID",
"id": "67596"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002623"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-453"
},
{
"db": "NVD",
"id": "CVE-2014-2350"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:emerson:deltav",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-002623"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Nesterov, Alexander Tlyapov, Dmitry Nagibin, Alexey Osipov, and Timur Yunusov.",
"sources": [
{
"db": "BID",
"id": "67596"
}
],
"trust": 0.3
},
"cve": "CVE-2014-2350",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2014-2350",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 2.4,
"confidentialityImpact": "NONE",
"exploitabilityScore": 1.5,
"id": "CNVD-2014-03278",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "LOW",
"trust": 0.6,
"vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 2.4,
"confidentialityImpact": "NONE",
"exploitabilityScore": 1.5,
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "LOW",
"trust": 0.2,
"vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 2.4,
"confidentialityImpact": "NONE",
"exploitabilityScore": 1.5,
"id": "f73024e8-2351-11e6-abef-000c29c66e3d",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "LOW",
"trust": 0.2,
"vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "HIGH",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 2.4,
"confidentialityImpact": "NONE",
"exploitabilityScore": 1.5,
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "LOW",
"trust": 0.2,
"vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P",
"version": "2.9 [IVD]"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2014-2350",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2014-2350",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2014-03278",
"trust": 0.6,
"value": "LOW"
},
{
"author": "CNNVD",
"id": "CNNVD-201405-453",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "IVD",
"id": "f73024e8-2351-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "IVD",
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1",
"trust": 0.2,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "f73024e8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2014-03278"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002623"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-453"
},
{
"db": "NVD",
"id": "CVE-2014-2350"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program. Emerson DeltaV is a digital automation system from Emerson, USA. The system provides I/O on-demand configuration, embedded intelligent control and alarm panel functions. Emerson DeltaV has a security bypass vulnerability. \nAttackers can exploit this issue to bypass the authentication mechanism and gain access to the vulnerable application. \nEmerson DeltaV versions 10.3.1, 11.3, 11.3.1, and 12.3 are vulnerable. DeltaV Versions 10.3.1, 11.3, 11.3.1, and 12.3\nCan be related to Emerson AMS Device Management version, Emerson AMS\nWireless SNAP-ON also. \n\nCVE-2014-2349 - World writable system folder\nCVE-2014-2350 - Hardcoded credentials\n\nPlease find fixes in KBA NK-1400-0031. \n\nKudos: Kirill Nesterov, Alexander Tlyapov, Dmitry Nagibin, Alexey Osipov\nand Timur Yunusov\n\n\nhttp://www.scadastrangelove.blogspot.com/2014/05/emerson-deltav-vulnerabilitiesfixes.html\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2014-2350"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002623"
},
{
"db": "CNVD",
"id": "CNVD-2014-03278"
},
{
"db": "BID",
"id": "67596"
},
{
"db": "IVD",
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "f73024e8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1"
},
{
"db": "PACKETSTORM",
"id": "126810"
}
],
"trust": 3.06
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2014-2350",
"trust": 4.0
},
{
"db": "ICS CERT",
"id": "ICSA-14-133-02",
"trust": 2.7
},
{
"db": "CNVD",
"id": "CNVD-2014-03278",
"trust": 1.2
},
{
"db": "CNNVD",
"id": "CNNVD-201405-453",
"trust": 1.2
},
{
"db": "BID",
"id": "67596",
"trust": 0.9
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002623",
"trust": 0.8
},
{
"db": "OSVDB",
"id": "107279",
"trust": 0.6
},
{
"db": "IVD",
"id": "E84687A4-1ED5-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "IVD",
"id": "F73024E8-2351-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "IVD",
"id": "7D70A8D1-463F-11E9-929A-000C29342CB1",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "126810",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "f73024e8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2014-03278"
},
{
"db": "BID",
"id": "67596"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002623"
},
{
"db": "PACKETSTORM",
"id": "126810"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-453"
},
{
"db": "NVD",
"id": "CVE-2014-2350"
}
]
},
"id": "VAR-201405-0281",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "f73024e8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2014-03278"
}
],
"trust": 0.12
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 1.2
}
],
"sources": [
{
"db": "IVD",
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "f73024e8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2014-03278"
}
]
},
"last_update_date": "2024-11-23T23:02:49.237000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "\u5206\u6563\u578b\u5236\u5fa1\u30b7\u30b9\u30c6\u30e0\uff08DCS\uff09 DeltaV\u30b7\u30b9\u30c6\u30e0",
"trust": 0.8,
"url": "http://www.emerson.co.jp/div/epm/product5_1.html"
},
{
"title": "Emerson DeltaV hard-coded certificate security bypass vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/45903"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-03278"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002623"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-255",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-002623"
},
{
"db": "NVD",
"id": "CVE-2014-2350"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://ics-cert.us-cert.gov/advisories/icsa-14-133-02"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-2350"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-2350"
},
{
"trust": 0.6,
"url": "http://osvdb.com/show/osvdb/107279"
},
{
"trust": 0.3,
"url": "http://www2.emersonprocess.com/en-us/brands/edservices/automationsystems/deltav/pages/deltavtraining.aspx"
},
{
"trust": 0.3,
"url": "http://ics-cert.us-cert.gov/advisories/icsa-14-133-02#footnotee_tgc3i2k"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-2350"
},
{
"trust": 0.1,
"url": "http://www.scadastrangelove.blogspot.com/2014/05/emerson-deltav-vulnerabilitiesfixes.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-2349"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-03278"
},
{
"db": "BID",
"id": "67596"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002623"
},
{
"db": "PACKETSTORM",
"id": "126810"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-453"
},
{
"db": "NVD",
"id": "CVE-2014-2350"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "f73024e8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1"
},
{
"db": "CNVD",
"id": "CNVD-2014-03278"
},
{
"db": "BID",
"id": "67596"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-002623"
},
{
"db": "PACKETSTORM",
"id": "126810"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-453"
},
{
"db": "NVD",
"id": "CVE-2014-2350"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-05-27T00:00:00",
"db": "IVD",
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d"
},
{
"date": "2014-05-27T00:00:00",
"db": "IVD",
"id": "f73024e8-2351-11e6-abef-000c29c66e3d"
},
{
"date": "2014-05-27T00:00:00",
"db": "IVD",
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1"
},
{
"date": "2014-05-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-03278"
},
{
"date": "2014-05-22T00:00:00",
"db": "BID",
"id": "67596"
},
{
"date": "2014-05-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002623"
},
{
"date": "2014-05-27T04:44:44",
"db": "PACKETSTORM",
"id": "126810"
},
{
"date": "2014-05-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201405-453"
},
{
"date": "2014-05-22T20:55:06.440000",
"db": "NVD",
"id": "CVE-2014-2350"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-05-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-03278"
},
{
"date": "2014-05-22T00:00:00",
"db": "BID",
"id": "67596"
},
{
"date": "2014-05-26T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-002623"
},
{
"date": "2014-05-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201405-453"
},
{
"date": "2024-11-21T02:06:07.837000",
"db": "NVD",
"id": "CVE-2014-2350"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201405-453"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Emerson DeltaV Vulnerable to access restrictions",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-002623"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Trust management",
"sources": [
{
"db": "IVD",
"id": "e84687a4-1ed5-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "f73024e8-2351-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "7d70a8d1-463f-11e9-929a-000c29342cb1"
},
{
"db": "CNNVD",
"id": "CNNVD-201405-453"
}
],
"trust": 1.2
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…