CVE-2021-33001

xArrow SCADA Cross-site Scripting

xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisvalue.htm, which may allow an unauthorized attacker to execute arbitrary code.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Xarrow

Products

Xarrow

CVE-2021-33021

xArrow SCADA Cross-site Scripting

xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisalarm.htm, which may allow an unauthorized attacker to execute arbitrary code.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Xarrow

Products

Xarrow

CVE-2021-33025

xArrow SCADA Path Traversal

xArrow SCADA versions 7.2 and prior permits unvalidated registry keys to be run with application-level privileges.

CVSS 3.1 · 5.6 Medium EPSS < 1% KEV · Not listed

Vendors

Xarrow

Products

Xarrow

CVE-2022-1357

Cambium Networks cnMaestro OS Command Injection

The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command.

CVSS 3.1 · 9.8 Critical EPSS 1.8% KEV · Not listed

Vendors

Cambiumnetworks

Products

Cnmaestro

CVE-2022-1356

Cambium Networks cnMaestro use of Potentially Dangerous Function

cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Cambiumnetworks

Products

Cnmaestro

CVE-2022-1359

Cambium Networks cnMaestro Path Traversal

The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker chooses. This could allow an attacker to write any data to any file in the server.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Cambiumnetworks

Products

Cnmaestro

CVE-2022-1360

Cambium Networks cnMaestro OS Command Injection

The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a remote attacker to change server configuration settings.

CVSS 3.1 · 8.2 High EPSS 1.9% KEV · Not listed

Vendors

Cambiumnetworks

Products

Cnmaestro

CVE-2022-1362

Cambium Networks cnMaestro OS Command Injection

The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed

Vendors

Cambiumnetworks

Products

Cnmaestro

CVE-2021-42700

Inkscape Out-of-bounds Read

Inkscape 0.91 is vulnerable to an out-of-bounds read, which may allow an attacker to have access to unauthorized information.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Inkscape

Products

Inkscape

CVE-2021-42702

Inkscape Access of Uninitialized Pointer

Inkscape version 0.91 can access an uninitialized pointer, which may allow an attacker to have access to unauthorized information.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Inkscape

Products

Inkscape

CVE-2021-42704

Inkscape Out-of-bounds Write

Inkscape version 0.91 is vulnerable to an out-of-bounds write, which may allow an attacker to arbitrary execute code.

CVSS 3.1 · 7.8 High EPSS 1.6% KEV · Not listed

Vendors

Inkscape

Products

Inkscape

CVE-2020-16209

Fieldcomm Group HART-IP and hipserver - Stack-based Buffer Overflow

A malicious attacker could exploit the interface of the Fieldcomm Group HART-IP (release 1.0.0.0) by constructing messages with sufficiently large payloads to overflow the internal buffer and crash the device, or obtain control of the device.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed

Vendors

Fieldcommgroup

Products

Hart-ip Developer Kit Hart-ip Developer Kit Firmware Hipserver

CVE-2021-32934

ThroughTek P2P SDK - Cleartext Transmission of Sensitive Information

The affected ThroughTek P2P products (SDKs using versions before 3.1.5, any versions with nossl tag, device firmware not using AuthKey for IOTC conneciton, firmware using AVAPI module without enabling DTLS mechanism, and firmware using P2PTunnel or RDT module) do not sufficiently protect data transferred between the local device and ThroughTek servers. This can allow an attacker to access sensitive information, such as camera feeds.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Throughtek

Products

Kalay P2p Software Development Kit

CVE-2020-16235

Emerson OpenEnterprise - Inadequate Encryption Strength

Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed

Vendors

Emerson

Products

Openenterprise Scada Server

CVE-2021-32941

Annke Network Video Recorder - Stack-based Buffer Overflow

Annke N48PBB (Network Video Recorder) products of version 3.4.106 build 200422 and prior are vulnerable to a stack-based buffer overflow, which allows an unauthorized remote attacker to execute arbitrary code with the same privileges as the server user (root).

CVSS 3.1 · 9.4 Critical EPSS 15.2% KEV · Not listed

Vendors

Annke

Products

N48pbb N48pbb Firmware

CVE-2022-1467

AVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere

Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed

Vendors

Aveva

Products

Intouch Access Anywhere Plant Scada Access Anywhere

CVE-2021-32958

Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens for the web user interface (UI). With access to the web UI an attacker can access assets managed by the SRA installation and could compromise the installation.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Claroty

Products

Secure Remote Access

CVE-2022-1669

Circutor COMPACT DC-S BASIC

A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary (index.cgi) to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Address" value and it would be copied to a second variable with a "strcpy" vulnerable function without checking its length. Because of this, it is possible to send a long address value to overflow the process stack, controlling the function return address.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed

Vendors

Circutor

Products

Compact Dc-s Basic Compact Dc-s Basic Firmware

CVE-2021-32964

Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from the file system.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Aggsoft

Products

Webserver

CVE-2021-32962

Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to cross-site scripting, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed

Vendors

Aggsoft

Products

Webserver