Latest CVE Feed
-
3.3
LOWCVE-2021-22305
There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause ... Read more
- EPSS Score: %0.03
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
3.3
LOWCVE-2021-22304
There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this vulnerability by sending specific message to the affected m... Read more
- EPSS Score: %0.03
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
4.3
MEDIUMCVE-2021-22303
There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free.... Read more
- EPSS Score: %0.08
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
7.1
HIGHCVE-2021-22302
There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising... Read more
- EPSS Score: %0.03
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
6.7
MEDIUMCVE-2021-22301
Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker can exploit the vulnerability to cause buffer overflow.... Read more
- EPSS Score: %0.03
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
4.1
MEDIUMCVE-2021-22300
There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process acce... Read more
- EPSS Score: %0.01
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-22299
There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected... Read more
Affected Products : smc2.0_firmware manageone imaster_mae-m network_functions_virtualization_fusionsphere smc2.0- EPSS Score: %0.02
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2021-22298
There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Af... Read more
Affected Products : manageone- EPSS Score: %0.18
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-22296
A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system.... Read more
Affected Products : harmonyos- EPSS Score: %0.07
- Published: Mar. 02, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-22295
A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to cause the device to hang due to the page error OsVmPageFaultHandler.... Read more
Affected Products : harmonyos- EPSS Score: %0.02
- Published: Aug. 06, 2021
- Modified: Nov. 21, 2024
-
3.3
LOWCVE-2021-22294
A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerability to issue commands repeatedly, exhausting system service resources.... Read more
Affected Products : harmonyos- EPSS Score: %0.02
- Published: Mar. 02, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-22293
Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1,... Read more
- EPSS Score: %0.13
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-22292
There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specific messages to affected devices, causing system resource exhaustion and web a... Read more
- EPSS Score: %0.17
- Published: Feb. 06, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-22289
Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow an unauthenticated network attacker to execute code.... Read more
Affected Products : studio- EPSS Score: %0.72
- Published: Aug. 11, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-22288
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.... Read more
- EPSS Score: %0.54
- Published: Feb. 04, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-22286
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.... Read more
- EPSS Score: %0.54
- Published: Feb. 04, 2022
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-22285
Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of service or make the module unresponsive.... Read more
- EPSS Score: %0.54
- Published: Feb. 04, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-22284
Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.... Read more
Affected Products : opc_server_for_ac_800m- EPSS Score: %0.34
- Published: Feb. 04, 2022
- Modified: Nov. 21, 2024
-
6.2
MEDIUMCVE-2021-22283
Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protection relays - 615 series CN 4.0 FP1, ABB Relion protection relays - 615 series IEC 5.0, ABB Relion ... Read more
Affected Products : rex640_pcl1_firmware rex640_pcl2_firmware rex640_pcl3_firmware smu615_firmware rec615_firmware rer615_firmware evd4_firmware ref615r_firmware rer620_firmware relion_611_firmware +28 more products- EPSS Score: %0.07
- Published: Feb. 28, 2023
- Modified: Nov. 21, 2024
-
8.3
HIGHCVE-2021-22282
Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12. ... Read more
- EPSS Score: %0.17
- Published: Feb. 02, 2024
- Modified: Nov. 21, 2024