text: /****** Object:  Table [dbo].[validation_icsa_statistics_paper_dev] 
  Dataset SQL by the University of Birmingham Centre for Cyber Security and Privacy
  and the UKRRIN Centre of Excellence in Digital Systems
  
  LICENSE: CC-BY-4.0
  
  Please cite this dataset as:
  R.J. Thomas and T. Chothia. (2020) "Learning from Vulnerabilities - Categorising, 
  Understanding and Detecting Weaknesses in Industrial Control Systems" in: 
  Katsikas S. et al. (eds) Computer Security. CyberICPS 2020. Lecture Notes in 
  Computer Science. Springer, Cham.
  
  Usage: see uob-ritics.github.io/learning-from-vulnerabilities
  */
  
  SET ANSI_NULLS ON
  GO
  
  SET QUOTED_IDENTIFIER ON
  GO
  
  CREATE TABLE [dbo].[validation_icsa_statistics_paper_dev](
  	[icsa_id] [varchar](30) NOT NULL,
  	[cwe_id] [varchar](20) NOT NULL,
  	[cve_id] [varchar](30) NOT NULL,
  	[cvss_version] [varchar](10) NULL,
  	[cve_description] [varchar](5000) NULL,
  	[cvss_base_score] [float] NULL,
  	[cvss_impact_score] [float] NULL,
  	[cvss_exploitability_score] [float] NULL,
  	[cvss_severity] [varchar](50) NULL,
  	[nvd_cwe_id] [varchar](20) NULL,
  	[cvss_vector] [varchar](500) NULL,
  	[accessVector] [varchar](100) NULL,
  	[complexity] [varchar](100) NULL,
  	[availabilityImpact] [varchar](100) NULL,
  	[integrityImpact] [varchar](100) NULL,
  	[confidentialityImpact] [varchar](100) NULL,
  	[allPriv] [varchar](50) NULL,
  	[userPriv] [varchar](50) NULL,
  	[otherPriv] [varchar](50) NULL,
  	[userInteractionRequired] [varchar](50) NULL,
  	[privilegesRequired] [varchar](50) NULL,
  	[u_sys_created] [datetime] NULL,
  	[u_sys_updated] [datetime] NULL,
  	[u_sfp_cluster] [varchar](20) NULL,
  	[u_old_cat] [varchar](100) NULL,
  	[u_new_cat] [varchar](100) NULL,
  	[u_other_cat] [varchar](100) NULL
  ) ON [PRIMARY]
  GO
  
  ALTER TABLE [dbo].[validation_icsa_statistics_paper_dev]  WITH CHECK ADD  CONSTRAINT [FK_validation_icsa_statistics_paper_dev_icsa_cwe] FOREIGN KEY([cwe_id])
  REFERENCES [dbo].[icsa_cwe] ([cwe_id])
  GO
  
  ALTER TABLE [dbo].[validation_icsa_statistics_paper_dev] CHECK CONSTRAINT [FK_validation_icsa_statistics_paper_dev_icsa_cwe]
  GO
  
  ALTER TABLE [dbo].[validation_icsa_statistics_paper_dev]  WITH CHECK ADD  CONSTRAINT [FK_validation_icsa_statistics_paper_dev_icsa_cwe_nvd] FOREIGN KEY([nvd_cwe_id])
  REFERENCES [dbo].[icsa_cwe] ([cwe_id])
  GO
  
  ALTER TABLE [dbo].[validation_icsa_statistics_paper_dev] CHECK CONSTRAINT [FK_validation_icsa_statistics_paper_dev_icsa_cwe_nvd]
  GO
  
  ALTER TABLE [dbo].[validation_icsa_statistics_paper_dev]  WITH CHECK ADD  CONSTRAINT [FK_validation_icsa_statistics_paper_dev_icsa_id] FOREIGN KEY([icsa_id])
  REFERENCES [dbo].[validation_icsa_alert] ([icsa_id])
  GO
  
  ALTER TABLE [dbo].[validation_icsa_statistics_paper_dev] CHECK CONSTRAINT [FK_validation_icsa_statistics_paper_dev_icsa_id]
  GO
  
  ALTER TABLE [dbo].[validation_icsa_statistics_paper_dev]  WITH CHECK ADD  CONSTRAINT [FK_validation_icsa_statistics_paper_dev_sfp_cluster] FOREIGN KEY([u_sfp_cluster])
  REFERENCES [dbo].[icsa_cwe] ([cwe_id])
  GO
  
  ALTER TABLE [dbo].[validation_icsa_statistics_paper_dev] CHECK CONSTRAINT [FK_validation_icsa_statistics_paper_dev_sfp_cluster]
  GO
  
  
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-01', N'CWE-122', N'CVE-2019-10982', N'3', N'Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validation before copying data from project files onto the heap.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-07-24T15:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-05', N'CWE-20', N'CVE-2018-20034', N'3', N'A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-03-21T21:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-119', N'CVE-2019-12260', N'3', N'Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T21:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-02', N'CWE-287', N'CVE-2019-7666', N'3', N'Prima Systems FlexAir, Versions 2.3.38 and prior. The application allows improper authentication using the MD5 hash value of the password, which may allow an attacker with access to the database to login as admin without decrypting the password.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-287', N'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-07-01T19:15:00.000' AS DateTime), CAST(N'2019-07-31T16:15:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-06', N'CWE-125', N'CVE-2019-10994', N'3', N'Processing a specially crafted project file in LAquis SCADA 4.3.1.71 may trigger an out-of-bounds read, which may allow an attacker to obtain sensitive information. The attacker must have local access to the system. A CVSS v3 base score of 2.5 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).', 3.3, 1.4, 1.8, N'LOW', N'CWE-125', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N', N'LOCAL', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-08-05T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-03', N'CWE-190', N'CVE-2019-11479', N'3', N'Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-06-19T00:15:00.000' AS DateTime), CAST(N'2019-06-20T20:15:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-03', N'CWE-190', N'CVE-2019-11477', N'3', N'Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-190', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-06-19T00:15:00.000' AS DateTime), CAST(N'2019-06-20T20:15:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-03', N'CWE-400', N'CVE-2019-11478', N'3', N'Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-06-19T00:15:00.000' AS DateTime), CAST(N'2019-06-20T20:15:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-03', N'CWE-400', N'CVE-2019-11479', N'3', N'Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-06-19T00:15:00.000' AS DateTime), CAST(N'2019-06-20T20:15:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-04', N'CWE-79', N'CVE-2019-13923', N'3', N'A vulnerability has been identified in IE/WSN-PA Link WirelessHART Gateway (All versions). The integrated configuration web server of the affected device could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known.', 9.6, 6, 2.8, N'CRITICAL', N'CWE-79', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-13T17:15:00.000' AS DateTime), CAST(N'2019-09-24T22:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-05', N'CWE-20', N'CVE-2019-10937', N'3', N'A vulnerability has been identified in SIMATIC TDC CP51M1 (All versions < V1.1.7). An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerability could be exploited without authentication. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises availability of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-09-13T17:15:00.000' AS DateTime), CAST(N'2019-09-24T20:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-284', N'CVE-2019-18273', N'3', N'OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced.', 4.8, 2.7, 1.7, N'MEDIUM', N'CWE-79', N'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'HIGH', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T20:56:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-227-04', N'CWE-400', N'CVE-2019-6568', N'3', N'A vulnerability has been identified in CP1604, CP1616, CP343-1 Advanced (incl. SIPLUS NET variants), CP443-1 (incl. SIPLUS NET variants), CP443-1 Advanced (incl. SIPLUS NET variants), CP443-1 OPC UA (incl. SIPLUS NET variants), RFID 181EIP, SIMATIC CP 1616 and CP 1604, SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variants), SIMATIC CP 443-1 (incl. SIPLUS NET variants), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variants), SIMATIC CP 443-1 OPC UA, SIMATIC ET 200 SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200 SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F, SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (incl. SIPLUS variants), SIMATIC IPC DiagMonitor, SIMATIC RF181-EIP, SIMATIC RF182C, SIMATIC RF185C, SIMATIC RF186C, SIMATIC RF188C, SIMATIC RF600 family, SIMATIC RF600R, SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-PLCSIM Advanced, SIMATIC Teleservice Adapter IE Advanced, SIMATIC Teleservice Adapter IE Basic, SIMATIC Teleservice Adapter IE Standard, SIMATIC WinAC RTX (F) 2010, SIMATIC WinCC Runtime Advanced, SIMOCODE pro V EIP (incl. SIPLUS variants), SIMOCODE pro V PN (incl. SIPLUS variants), SINAMICS G130 V4.6 Control Unit, SINAMICS G130 V4.7 Control Unit, SINAMICS G130 V4.7 SP1 Control Unit, SINAMICS G130 V4.8 Control Unit, SINAMICS G130 V5.1 Control Unit, SINAMICS G130 V5.1 SP1 Control Unit, SINAMICS G150 V4.6 Control Unit, SINAMICS G150 V4.7 Control Unit, SINAMICS G150 V4.7 SP1 Control Unit, SINAMICS G150 V4.8 Control Unit, SINAMICS G150 V5.1 Control Unit, SINAMICS G150 V5.1 SP1 Control Unit, SINAMICS GH150 V4.7 (Control Unit), SINAMICS GH150 V4.8 (Control Unit), SINAMICS GL150 V4.7 (Control Unit), SINAMICS GL150 V4.8 (Control Unit), SINAMICS GM150 V4.7 (Control Unit), SINAMICS GM150 V4.8 (Control Unit), SINAMICS S120 V4.6 Control Unit (incl. SIPLUS variants), SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants), SINAMICS S120 V4.7 SP1 Control Unit (incl. SIPLUS variants), SINAMICS S120 V4.8 Control Unit (incl. SIPLUS variants), SINAMICS S120 V5.1 Control Unit (incl. SIPLUS variants), SINAMICS S120 V5.1 SP1 Control Unit (incl. SIPLUS variants), SINAMICS S150 V4.6 Control Unit, SINAMICS S150 V4.7 Control Unit, SINAMICS S150 V4.7 SP1 Control Unit, SINAMICS S150 V4.8 Control Unit, SINAMICS S150 V5.1 Control Unit, SINAMICS S150 V5.1 SP1 Control Unit, SINAMICS S210 V5.1 Control Unit, SINAMICS S210 V5.1 SP1 Control Unit, SINAMICS SL150 V4.7 (Control Unit), SINAMICS SL150 V4.8 (Control Unit), SINAMICS SM120 V4.7 (Control Unit), SINAMICS SM120 V4.8 (Control Unit), SINAMICS SM150 V4.8 (Control Unit), SITOP Manager, SITOP PSU8600, SITOP UPS1600 (incl. SIPLUS variants), TIM 1531 IRC (incl. SIPLUS NET variants), TIM 1531 IRC (incl. SIPLUS variants). The webserver of the affected devices contains a vulnerability that may lead to a denial-of-service condition. An attacker may cause a denial-of-service situation which leads to a restart of the webserver of the affected device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-04-17T14:29:00.000' AS DateTime), CAST(N'2020-02-11T16:15:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-06', N'CWE-190', N'CVE-2017-9765', N'3', N'Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil''s Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.', 8.1, 5.9, 2.2, N'HIGH', N'CWE-190', N'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'HIGH', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2017-07-20T00:29:00.000' AS DateTime), CAST(N'2017-09-16T10:25:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-260-03', N'CWE-200', N'CVE-2019-13523', N'3', N'In Honeywell Performance IP Cameras and Performance NVRs, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data in JSON format for IP cameras and NVRs (Network Video Recorders), which can be accessed without authentication over the network. Affected performance IP Cameras: HBD3PR2,H4D3PRV3,HED3PR3,H4D3PRV2,HBD3PR1,H4W8PR2,HBW8PR2,H2W2PC1M,H2W4PER3,H2W2PER3,HEW2PER3,HEW4PER3B,HBW2PER1,HEW4PER2,HEW4PER2B,HEW2PER2,H4W2PER2,HBW2PER2,H4W2PER3, and HPW2P1. Affected Performance Series NVRs: HEN08104,HEN08144,HEN081124,HEN16104,HEN16144,HEN16184,HEN16204,HEN162244,HEN16284,HEN16304,HEN16384,HEN32104,HEN321124,HEN32204,HEN32284,HEN322164,HEN32304, HEN32384,HEN323164,HEN64204,HEN64304,HEN643164,HEN643324,HEN643484,HEN04103,HEN04113,HEN04123,HEN08103,HEN08113,HEN08123,HEN08143,HEN16103,HEN16123,HEN16143,HEN16163,HEN04103L,HEN08103L,HEN16103L,HEN32103L.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-200', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-09-26T16:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-88', N'CVE-2019-12262', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-284', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-14T20:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-297-01', N'CWE-798', N'CVE-2019-13553', N'3', N'Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 � B1.2.4. The authentication mechanism on affected systems is configured using hard-coded credentials. These credentials could allow attackers to influence the primary operations of the affected systems, namely turning the cooling unit on and off and setting the temperature set point.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-798', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-25T18:15:00.000' AS DateTime), CAST(N'2020-02-10T21:50:00.000' AS DateTime), NULL, N'Authentication', N'Default Logins', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-283-01', N'CWE-20', N'CVE-2019-10923', N'3', N'A vulnerability has been identified in CP1604 (All versions < V2.8), CP1616 (All versions < V2.8), Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller (All versions < V4.1.1 Patch 05), Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 (All versions < V4.5.0 Patch 01), Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P (All versions < V4.5.0), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5.2.1), SIMATIC CP1604 (All versions < V2.8), SIMATIC CP1616 (All versions < V2.8), SIMATIC ET200M (incl. SIPLUS variants) (All versions), SIMATIC ET200S (incl. SIPLUS variants) (All versions), SIMATIC ET200ecoPN (except 6ES7148-6JD00-0AB0 and 6ES7146-6FF00-0AB0) (All versions), SIMATIC ET200pro (All versions), SIMATIC ET200pro (incl. SIPLUS variants) (All versions), SIMATIC PN/PN Coupler 6ES7158-3AD01-0XA0 (incl. SIPLUS NET variant) (All versions), SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions), SIMATIC WinAC RTX (F) 2010 (All versions < SIMATIC WinAC RTX 2010 SP3), SIMOTION (incl. SIPLUS variants) (All versions), SINAMICS DCM (All versions < V1.5 HF1), SINAMICS DCP (All versions < V1.3), SINAMICS G110M V4.7 Control Unit (All versions < V4.7 SP10 HF5), SINAMICS G120 V4.7 Control Unit (incl. SIPLUS variants) (All versions < V4.7 SP10 HF5), SINAMICS G130 V4.7 Control Unit (All versions < V4.7 HF29), SINAMICS G150 Control Unit (All versions < V4.8), SINAMICS GH150 V4.7 Control Unit (All versions), SINAMICS GL150 V4.7 Control Unit (All versions), SINAMICS GM150 V4.7 Control Unit (All versions), SINAMICS S110 Control Unit (All versions), SINAMICS S120 V4.7 Control Unit and CBE20 (incl. SIPLUS variants) (All versions < V4.7 HF34), SINAMICS S150 Control Unit (All versions < V4.8), SINAMICS SL150 V4.7 Control Unit (All versions < V4.7 HF33), SINAMICS SM120 V4.7 Control Unit (All versions), SINUMERIK 828D (All versions < V4.8 SP5), SINUMERIK 840D sl (All versions). An attacker with network access to an affected product may cause a Denial-of-Service condition by breaking the real-time synchronization (IRT) of the affected installation. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected installation. No user interaction is required to exploit this security vulnerability. The vulnerability impacts the availability of the affected installations.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-10T14:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-330-01', N'CWE-22', N'CVE-2019-18253', N'3', N'An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670 2.0.0.4, 2.1.0.1, and prior) outside the intended directory.', 10, 6, 3.9, N'CRITICAL', N'CWE-22', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-11-27T23:15:00.000' AS DateTime), CAST(N'2019-12-17T17:27:00.000' AS DateTime), N'CWE-981', N'Path Resolution', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-01', N'CWE-924', N'CVE-2018-14526', N'3', N'An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption oracle. An attacker within range of the Access Point and client can abuse the vulnerability to recover sensitive information.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-924', N'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', N'ADJACENT_NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2018-08-08T19:29:00.000' AS DateTime), CAST(N'2019-10-03T00:03:00.000' AS DateTime), NULL, N'Other', N'Cryptography', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-749', N'CVE-2019-18340', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). Both the SiNVR 3 Video Server and the Central Control Server (CCS) store user and device passwords by applying weak cryptography. A local attacker could exploit this vulnerability to extract the passwords from the user database and/or the device configuration files to conduct further attacks.', 5.5, 3.6, 1.8, N'MEDIUM', N'CWE-200', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'LOCAL', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T00:06:00.000' AS DateTime), N'CWE-975', N'Other', N'Cryptography', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-01', N'CWE-79', N'CVE-2019-18267', N'3', N'An issue was found in GE S2020/S2020G Fast Switch 61850, S2020/S2020G Fast Switch 61850 Versions 07A03 and prior. An attacker can inject arbitrary Javascript in a specially crafted HTTP request that may be reflected back in the HTTP response. The device is also vulnerable to a stored cross-site scripting vulnerability that may allow session hijacking, disclosure of sensitive data, cross-site request forgery (CSRF) attacks, and remote code execution.', 5.4, 2.7, 2.3, N'MEDIUM', N'CWE-79', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'LOW', CAST(N'2019-12-18T20:15:00.000' AS DateTime), CAST(N'2020-01-07T18:33:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-190', N'CVE-2019-18299', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-190', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T15:09:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-190', N'CVE-2019-18305', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-190', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T19:39:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-353-01', N'CWE-400', N'CVE-2019-19707', N'3', N'On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices (with firmware through 6.0), denial of service can occur via PROFINET DCE-RPC endpoint discovery packets.', 7.5, 3.6, 3.9, N'HIGH', N'NVD-CWE-noinfo', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-11T02:15:00.000' AS DateTime), CAST(N'2019-12-17T17:46:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-353-02', N'CWE-89', N'CVE-2019-18234', N'3', N'Equinox Control Expert all versions, is vulnerable to an SQL injection attack, which may allow an attacker to remotely execute arbitrary code.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-89', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-23T19:15:00.000' AS DateTime), CAST(N'2019-12-30T16:38:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-190-01', N'CWE-798', N'CVE-2018-11691', N'3', N'Emerson DeltaV Smart Switch Command Center application, available in versions 11.3.x and 12.3.1, was unable to change the DeltaV Smart Switches� management password upon commissioning. Emerson released patches for DeltaV workstations to address this issue, and the patches can be downloaded from Emerson�s Guardian Support Portal. Please refer to the DeltaV Security Notification DSN19003 (KBA NK-1900-0808) for more information about this issue. DeltaV versions 13.3 and higher use the Network Device Command Center application to manage DeltaV Smart Switches, and this newer application is not impacted by this issue. After patching the Smart Switch Command Center, users are required to either commission the DeltaV Smart Switches or change password using the tool.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-798', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-05-14T16:29:00.000' AS DateTime), CAST(N'2020-02-10T21:43:00.000' AS DateTime), NULL, N'Authentication', N'Default Logins', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-190-02', N'CWE-284', N'CVE-2019-10970', N'3', N'In Rockwell Automation PanelView 5510 (all versions manufactured before March 13, 2019 that have never been updated to v4.003, v5.002, or later), a remote, unauthenticated threat actor with access to an affected PanelView 5510 Graphic Display, upon successful exploit, may boot-up the terminal and gain root-level access to the device�s file system.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-284', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-07-11T20:15:00.000' AS DateTime), CAST(N'2020-02-10T21:49:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-190-03', N'CWE-416', N'CVE-2019-6822', N'3', N'A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code execution when opening a specially crafted Zelio Soft 2 project file.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-416', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-07-15T21:15:00.000' AS DateTime), CAST(N'2019-07-22T20:15:00.000' AS DateTime), N'CWE-983', N'Resource Management', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-190-04', N'CWE-79', N'CVE-2019-10933', N'3', N'A vulnerability has been identified in Spectrum Power 3 (Corporate User Interface) (All versions <= v3.11), Spectrum Power 4 (Corporate User Interface) (Version v4.75), Spectrum Power 5 (Corporate User Interface) (All versions < v5.50), Spectrum Power 7 (Corporate User Interface) (All versions <= v2.20). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user does not need to be logged into the web interface in order for the exploitation to succeed.At the stage of publishing this security advisory no public exploitation is known.', 6.1, 2.7, 2.8, N'MEDIUM', N'CWE-79', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-07-11T22:15:00.000' AS DateTime), CAST(N'2019-08-13T20:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-190-05', N'CWE-20', N'CVE-2019-10931', N'3', N'A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.59). Specially crafted packets sent to port 443/TCP could cause a Denial of Service condition.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-07-11T22:15:00.000' AS DateTime), CAST(N'2019-12-12T19:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-190-05', N'CWE-20', N'CVE-2019-10930', N'3', N'A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-434', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-07-11T22:15:00.000' AS DateTime), CAST(N'2019-12-12T19:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-190-05', N'CWE-20', N'CVE-2019-10930', N'3', N'A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions). A remote attacker could use specially crafted packets sent to port 443/TCP to upload, download or delete files in certain parts of the file system.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-434', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-07-11T22:15:00.000' AS DateTime), CAST(N'2019-12-12T19:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-190-05', N'CWE-20', N'CVE-2019-10931', N'3', N'A vulnerability has been identified in All other SIPROTEC 5 device types with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions ), DIGSI 5 engineering software (All versions < V7.90), SIPROTEC 5 device types 6MD85, 6MD86, 6MD89, 7UM85, 7SA87, 7SD87, 7SL87, 7VK87, 7SA82, 7SA86, 7SD82, 7SD86, 7SL82, 7SL86, 7SJ86, 7SK82, 7SK85, 7SJ82, 7SJ85, 7UT82, 7UT85, 7UT86, 7UT87 and 7VE85 with CPU variants CP300 and CP100 and the respective Ethernet communication modules (All versions < V7.90), SIPROTEC 5 relays with CPU variants CP200 and the respective Ethernet communication modules (All versions < V7.59). Specially crafted packets sent to port 443/TCP could cause a Denial of Service condition.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-07-11T22:15:00.000' AS DateTime), CAST(N'2019-12-12T19:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-297-02', N'CWE-306', N'CVE-2019-13525', N'3', N'In IP-AK2 Access Control Panel Version 1.04.07 and prior, the integrated web server of the affected devices could allow remote attackers to obtain web configuration data, which can be accessed without authentication over the network.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-306', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-25T18:15:00.000' AS DateTime), CAST(N'2019-10-30T18:25:00.000' AS DateTime), N'CWE-952', N'Authentication', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-302-01', N'CWE-20', N'CVE-2019-16675', N'3', N'An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC Worx or Config+ project file could lead to an Out-of-bounds Read and remote code execution. The attacker needs to get access to an original PC Worx or Config+ project to be able to manipulate data inside. After manipulation, the attacker needs to exchange the original files with the manipulated ones on the application programming workstation.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-10-31T22:15:00.000' AS DateTime), CAST(N'2019-11-26T16:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-304-01', N'CWE-22', N'CVE-2019-13551', N'3', N'Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to use in file operations. An attacker can leverage these vulnerabilities to remotely execute code while posing as an administrator.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-22', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-31T21:15:00.000' AS DateTime), CAST(N'2019-11-06T00:04:00.000' AS DateTime), N'CWE-981', N'Path Resolution', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-304-01', N'CWE-862', N'CVE-2019-13547', N'3', N'Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the IP address to use the function without authentication.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-862', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-31T21:15:00.000' AS DateTime), CAST(N'2019-11-06T00:11:00.000' AS DateTime), NULL, N'Authentication', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-304-01', N'CWE-611', N'CVE-2019-18227', N'3', N'Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-611', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-31T22:15:00.000' AS DateTime), CAST(N'2019-11-04T14:53:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-304-01', N'CWE-89', N'CVE-2019-18229', N'3', N'Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vulnerabilities. An attacker can leverage these vulnerabilities to disclose information.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-89', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-10-31T22:15:00.000' AS DateTime), CAST(N'2019-11-05T23:16:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-304-02', N'CWE-20', N'CVE-2019-18228', N'3', N'Honeywell equIP series IP cameras Multiple equIP Series Cameras, A vulnerability exists in the affected products where a specially crafted HTTP packet request could result in a denial of service.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-31T22:15:00.000' AS DateTime), CAST(N'2019-11-05T23:20:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-304-03', N'CWE-306', N'CVE-2019-18230', N'3', N'Honeywell equIP and Performance series IP cameras, multiple versions, A vulnerability exists where the affected product allows unauthenticated access to audio streaming over HTTP.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-306', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-31T22:15:00.000' AS DateTime), CAST(N'2019-11-05T20:29:00.000' AS DateTime), N'CWE-952', N'Authentication', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-304-04', N'CWE-294', N'CVE-2019-18226', N'3', N'Honeywell equIP series and Performance series IP cameras and recorders, A vulnerability exists in the affected products where IP cameras and recorders have a potential replay attack vulnerability as a weak authentication method is retained for compatibility with legacy products.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-294', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-31T22:15:00.000' AS DateTime), CAST(N'2019-11-05T23:23:00.000' AS DateTime), N'CWE-956', N'Channel', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-309-01', N'CWE-477', N'CVE-2019-11769', N'3', N'An issue was discovered in TeamViewer 14.2.2558. Updating the product as a non-administrative user requires entering administrative credentials into the GUI. Subsequently, these credentials are processed in Teamviewer.exe, which allows any application running in the same non-administrative user context to intercept them in cleartext within process memory. By using this technique, a local attacker is able to obtain administrative credentials in order to elevate privileges. This vulnerability can be exploited by injecting code into Teamviewer.exe which intercepts calls to GetWindowTextW and logs the processed credentials.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-522', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-09-11T20:15:00.000' AS DateTime), CAST(N'2019-09-13T16:29:00.000' AS DateTime), N'CWE-1001', N'API', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-309-01', N'CWE-477', N'CVE-2018-16550', N'3', N'TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN.', 9.8, 5.9, 3.9, N'CRITICAL', N'NVD-CWE-noinfo', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2018-09-05T22:29:00.000' AS DateTime), CAST(N'2019-10-03T00:03:00.000' AS DateTime), N'CWE-1001', N'API', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-309-01', N'CWE-477', N'CVE-2018-14333', N'3', N'TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, which might make it easier for attackers to obtain sensitive information by leveraging an unattended workstation on which TeamViewer has disconnected but remains running.', 8.1, 5.9, 2.2, N'HIGH', N'CWE-200', N'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'HIGH', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2018-07-17T02:29:00.000' AS DateTime), CAST(N'2018-09-17T19:51:00.000' AS DateTime), N'CWE-1001', N'API', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-309-01', N'CWE-477', N'CVE-2010-3128', N'2', N'Untrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .tvs or .tvc file.', 9.3, NULL, NULL, N'HIGH', N'NVD-CWE-Other', N'AV:N/AC:M/Au:N/C:C/I:C/A:C', N'NETWORK', N'MEDIUM', N'COMPLETE', N'COMPLETE', N'COMPLETE', N'0', N'0', N'0', N'1', NULL, CAST(N'2010-08-26T18:36:00.000' AS DateTime), CAST(N'2018-10-10T20:01:00.000' AS DateTime), N'CWE-1001', N'API', N'Other', N'DLL Hijacking')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-330-02', N'CWE-20', N'CVE-2019-18247', N'3', N'An attacker may use a specially crafted message to force Relion 650 series (versions 1.3.0.5 and prior) or Relion 670 series (versions 1.2.3.18, 2.0.0.11, 2.1.0.1 and prior) to reboot, which could cause a denial of service.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-11-27T23:15:00.000' AS DateTime), CAST(N'2019-12-11T20:39:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-01', N'CWE-428', N'CVE-2019-18245', N'3', N'Reliable Controls LicenseManager versions 3.4 and prior may allow an authenticated user to insert malicious code into the system root path, which may allow execution of code with elevated privileges of the application.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-428', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-11T23:15:00.000' AS DateTime), CAST(N'2019-12-17T19:06:00.000' AS DateTime), N'CWE-981', N'Path Resolution', N'Other', N'Command Injection')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-319', N'CVE-2018-10690', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an attacker to sniff the traffic easily and allows an attacker to compromise sensitive data such as credentials.', 8.1, 5.9, 2.2, N'HIGH', N'CWE-255', N'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'HIGH', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-10T23:29:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-284', N'CVE-2018-10691', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log (the system log). However, the same functionality allows an attacker to download the file without any authentication or authorization.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-284', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-10T23:29:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-1004', N'CVE-2018-10692', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily.', 6.1, 2.7, 2.8, N'MEDIUM', N'CWE-79', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-10T23:29:00.000' AS DateTime), NULL, N'Other', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-119', N'CVE-2018-10693', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is susceptible to a buffer overflow. By crafting a packet that contains a string of 516 characters, it is possible for an attacker to execute the attack.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-10T23:29:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-319', N'CVE-2018-10694', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not use any encryption mechanism by default. An administrator who uses the open wireless connection to set up the device can allow an attacker to sniff the traffic passing between the user''s computer and the device. This can allow an attacker to steal the credentials passing over the HTTP connection as well as TELNET traffic. Also an attacker can MITM the response and infect a user''s computer very easily as well.', 8.1, 5.9, 2.2, N'HIGH', N'CWE-255', N'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'HIGH', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-10T23:29:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-119', N'CVE-2018-10695', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the device''s network. However, the same functionality allows an attacker to execute commands on the device. The POST parameters "to1,to2,to3,to4" are all susceptible to buffer overflow. By crafting a packet that contains a string of 678 characters, it is possible for an attacker to execute the attack.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-11T14:49:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-352', N'CVE-2018-10696', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected against CSRF attacks, which allows an attacker to trick an administrator into executing actions without his/her knowledge, as demonstrated by the forms/iw_webSetParameters and forms/webSetMainRestart URIs.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-352', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-11T14:39:00.000' AS DateTime), NULL, N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-77', N'CVE-2018-10697', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is susceptible to this injection. By crafting a packet that contains shell metacharacters, it is possible for an attacker to execute the attack.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-77', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-10T23:29:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-319', N'CVE-2018-10698', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET daemon using the default credentials if they have not been changed by the user.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-255', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-10T23:29:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-77', N'CVE-2018-10699', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator can upload a certificate file used for connecting to the wireless network. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_privatePass" is susceptible to this injection. By crafting a packet that contains shell metacharacters, it is possible for an attacker to execute the attack.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-77', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-11T14:18:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-06', N'CWE-327', N'CVE-2019-10929', N'3', N'A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions <= 20.8), SIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC (All versions), SIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC2 (All versions), SIMATIC HMI Panel (incl. SIPLUS variants) (All versions), SIMATIC NET PC Software (All versions), SIMATIC S7 PLCSIM Advanced (All versions <= V3.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions <= V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), excluding CPU 1518 MFP (and related SIPLUS variant) (All versions <= V2.8.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), excluding CPU 1518-4 PN/DP and CPU 1518 MFP (and related SIPLUS variant) (All versions <= V2.8.1), SIMATIC S7-1500 Software Controller (All versions <= V20.8), SIMATIC STEP 7 (TIA Portal) (All versions < V16), SIMATIC WinCC (TIA Portal) (All versions < V16), SIMATIC WinCC OA (All versions <= 3.15), SIMATIC WinCC Runtime Advanced (All versions), SIMATIC WinCC Runtime Professional (All versions), TIM 1531 IRC (incl. SIPLUS variant) (All versions). An attacker in a Man-in-the-Middle position could potentially modify network traffic exchanged on port 102/tcp to PLCs of the SIMATIC S7-1200, SIMATIC S7-1500 and SIMATIC SoftwareController CPU families, due to certain properties in the calculation used for integrity protection. In order to exploit the vulnerability, an attacker must be able to perform a Man-in-the-Middle attack. The vulnerability could impact the integrity of the communication. No public exploitation of the vulnerability was known at the time of advisory publication.', 5.9, 3.6, 2.2, N'MEDIUM', N'CWE-284', N'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N', N'NETWORK', N'HIGH', N'NONE', N'HIGH', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-13T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-958', N'Cryptography', N'Cryptography', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-190', N'CVE-2019-18300', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-190', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T15:02:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-190', N'CVE-2019-18301', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-190', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T15:00:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-190', N'CVE-2019-18302', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-190', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T15:08:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-190', N'CVE-2019-18303', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-190', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T15:07:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-190', N'CVE-2019-18304', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-190', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T14:57:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-20', N'CVE-2018-4832', N'3', N'A vulnerability has been identified in OpenPCS 7 V7.1 and earlier (All versions), OpenPCS 7 V8.0 (All versions), OpenPCS 7 V8.1 (All versions < V8.1 Upd5), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd1), SIMATIC BATCH V7.1 and earlier (All versions), SIMATIC BATCH V8.0 (All versions < V8.0 SP1 Upd21), SIMATIC BATCH V8.1 (All versions < V8.1 SP1 Upd16), SIMATIC BATCH V8.2 (All versions < V8.2 Upd10), SIMATIC BATCH V9.0 (All versions < V9.0 SP1), SIMATIC NET PC-Software (All versions < 15 SP1), SIMATIC PCS 7 V7.1 and earlier (All versions), SIMATIC PCS 7 V8.0 (All versions), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP1), SIMATIC Route Control V7.1 and earlier (All versions), SIMATIC Route Control V8.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions < V9.0 Upd1), SIMATIC WinCC Runtime Professional V13 (All versions < V13 SP2 Upd2), SIMATIC WinCC Runtime Professional V14 (All versions < V14 SP1 Upd5), SIMATIC WinCC V7.2 and earlier (All versions < WinCC 7.2 Upd 15), SIMATIC WinCC V7.3 (All versions < WinCC 7.3 Upd 16), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 4), SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). Specially crafted messages sent to the RPC service of the affected products could cause a Denial-of-Service condition on the remote and local communication functionality of the affected products. A reboot of the system is required to recover the remote and local communication functionality. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2018-04-24T17:29:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-502', N'CVE-2019-18283', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authentication on the Application Server. An attacker can gain remote code execution by sending specifically crafted objects to one of its functions. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-502', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18284', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authentication on the Application Server. An attacker can use methods exposed via this interface to receive password hashes of other users and to change user passwords. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-319', N'CVE-2019-18285', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The RMI communication between the client and the Application Server is unencrypted. An attacker with access to the communication channel can read credentials of a valid user. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.9, 3.6, 2.2, N'MEDIUM', N'CWE-319', N'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'HIGH', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18286', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18287. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18287', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent from CVE-2019-18286. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-434', N'CVE-2019-18288', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with valid authentication at the RMI interface could be able to gain remote code execution through an unsecured file upload. Please note that an attacker needs to have access to the Application Highway in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-434', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), NULL, N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18289', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18293, CVE-2019-18295, and CVE-2019-18296. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T15:35:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-125', N'CVE-2019-18306', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-125', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T17:25:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-04', N'CWE-400', N'CVE-2019-13946', N'3', N'A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller (All versions), Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200 (All Versions < V4.5), Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P (All Versions < V4.6), PROFINET Driver for Controller (All Versions < V2.1), RUGGEDCOM RM1224 (All versions < V4.3), SCALANCE M-800 / S615 (All versions < V4.3), SCALANCE W700 IEEE 802.11n (All versions <= V6.0.1), SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All Versions < V5.3), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions), SCALANCE XB-200, XC-200, XP-200, XF-200BA and XR-300WG (All Versions < V3.0), SCALANCE XM-400 switch family (All Versions < V6.0), SCALANCE XR-500 switch family (All Versions < V6.0), SIMATIC CP 1616 and CP 1604 (All Versions < V2.8), SIMATIC CP 343-1 (incl. SIPLUS NET variants) (All versions), SIMATIC CP 343-1 Advanced (incl. SIPLUS NET variants) (All versions), SIMATIC CP 343-1 ERPC (All versions), SIMATIC CP 343-1 LEAN (incl. SIPLUS NET variants) (All versions), SIMATIC CP 443-1 (incl. SIPLUS NET variants) (All versions), SIMATIC CP 443-1 Advanced (incl. SIPLUS NET variants) (All versions), SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET200AL IM 157-1 PN (All versions), SIMATIC ET200M IM153-4 PN IO HF (incl. SIPLUS variants) (All versions), SIMATIC ET200M IM153-4 PN IO ST (incl. SIPLUS variants) (All versions), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants) (All Versions < V4.2.0), SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants) (All Versions < V4.1.0), SIMATIC ET200S (incl. SIPLUS variants) (All versions), SIMATIC ET200SP IM155-6 PN Basic (incl. SIPLUS variants) (All versions), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants) (All Versions < V3.3.1), SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants) (All Versions < V4.1.0), SIMATIC ET200ecoPN (except 6ES7148-6JD00-0AB0 and 6ES7146-6FF00-0AB0) (All versions), SIMATIC ET200pro, IM 154-3 PN HF (All versions), SIMATIC ET200pro, IM 154-4 PN HF (All versions), SIMATIC IPC Support, Package for VxWorks (All versions), SIMATIC MV400 family (All versions), SIMATIC PN/PN Coupler 6ES7158-3AD01-0XA0 (incl. SIPLUS NET variant) (All Versions), SIMATIC RF180C (All versions), SIMATIC RF182C (All versions), SIMATIC RF600 family (All versions < V3), SINAMICS DCP (All Versions < V1.3), SOFTNET-IE PNIO (All versions). Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit internal resource allocation when multiple legitimate diagnostic package requests are sent to the DCE-RPC interface. This could lead to a denial of service condition due to lack of memory for devices that include a vulnerable version of the stack. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-02-11T16:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-07', N'CWE-693', N'CVE-2019-13924', N'3', N'A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (all versions < 5.2.4), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (all versions < 4.1.3). The device does not send the X-Frame-Option Header in the administrative web interface, which makes it vulnerable to Clickjacking attacks. The security vulnerability could be exploited by an attacker that is able to trick an administrative user with a valid session on the target device into clicking on a website controlled by the attacker. The vulnerability could allow an attacker to perform administrative actions via the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.4, 2.5, 2.8, N'MEDIUM', N'CWE-1021', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2020-02-11T16:15:00.000' AS DateTime), CAST(N'2020-03-04T15:15:00.000' AS DateTime), N'CWE-975', N'Other', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-08', N'CWE-778', N'CVE-2019-19277', N'3', N'A vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of the device allow the creation of special accounts ("service users") with administrative privileges that could enable a remote authenticated attacker to perform actions that are not visible to other users of the system, such as granting persons access to a secured area.', 6.5, 5.2, 1.2, N'MEDIUM', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'HIGH', CAST(N'2020-03-10T20:15:00.000' AS DateTime), CAST(N'2020-03-12T16:03:00.000' AS DateTime), NULL, N'Other', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-09', N'CWE-552', N'CVE-2019-13941', N'3', N'A vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10.00). Vulnerable versions of OZW Web Server use predictable path names for project files that legitimately authenticated users have created by using the application''s export function. By accessing a specific uniform resource locator on the web server, a remote attacker could be able to download a project file without prior authentication. The security vulnerability could be exploited by an unauthenticated attacker with network access to the affected system. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises the confidentiality of the targeted system.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-552', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-02-11T16:15:00.000' AS DateTime), CAST(N'2020-03-04T15:15:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-125', N'CVE-2019-18307', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, and CVE-2019-18306. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-125', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T19:38:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-035-01', N'CWE-522', N'CVE-2020-6969', N'3', N'It is possible to unmask credentials and other sensitive information on �unprotected� project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-522', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-02-05T16:15:00.000' AS DateTime), CAST(N'2020-02-14T19:15:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-01', N'CWE-287', N'CVE-2019-20046', N'3', N'The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. The affected product does not require adequate authentication, which may allow an attacker to read sensitive information or execute arbitrary code. This is a different issue than CVE-2019-16879 and CVE-2019-20045.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-02-14T17:15:00.000' AS DateTime), CAST(N'2020-02-25T18:22:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-01', N'CWE-20', N'CVE-2019-20045', N'3', N'The Synergy Systems & Solutions PLC & RTU system has a vulnerability in HUSKY RTU 6049-E70 firmware versions 5.0 and prior. Specially crafted malicious packets could cause disconnection of active authentic connections or reboot of device. This is a different issue than CVE-2019-16879 and CVE-2019-20046.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-02-14T17:15:00.000' AS DateTime), CAST(N'2020-02-25T18:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-02', N'CWE-19', N'CVE-2015-5621', N'2', N'The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet.', 7.5, NULL, NULL, N'HIGH', N'CWE-19', N'AV:N/AC:L/Au:N/C:P/I:P/A:P', N'NETWORK', N'LOW', N'PARTIAL', N'PARTIAL', N'PARTIAL', N'0', N'0', N'0', N'0', NULL, CAST(N'2015-08-19T15:59:00.000' AS DateTime), CAST(N'2018-10-10T10:29:00.000' AS DateTime), NULL, N'Other', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-02', N'CWE-476', N'CVE-2018-18065', N'3', N'_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-476', N'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2018-10-08T18:29:00.000' AS DateTime), CAST(N'2019-10-16T18:15:00.000' AS DateTime), N'CWE-971', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-03', N'CWE-284', N'CVE-2019-12815', N'3', N'An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-284', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-07-19T23:15:00.000' AS DateTime), CAST(N'2019-07-23T18:15:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-03', N'CWE-835', N'CVE-2019-18217', N'3', N'ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-835', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-21T04:15:00.000' AS DateTime), CAST(N'2019-10-27T21:15:00.000' AS DateTime), NULL, N'Other', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-05', N'CWE-400', N'CVE-2019-13940', N'3', N'A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions < V4.1), SIMATIC S7-300 PN/DP CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions < V3.X.17), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants) (All versions). Affected devices contain a vulnerability that could cause a Denial-of-Service condition of the web server by sending specially crafted HTTP requests to ports 80/tcp and 443/tcp. The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device�s web server. Beyond the web service, no other functions or interfaces are affected by the Denial-of-Service condition.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-02-11T16:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-06', N'CWE-131', N'CVE-2019-19282', N'3', N'A vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions), SIMATIC BATCH V8.1 (All versions), SIMATIC BATCH V8.2 (All versions), SIMATIC BATCH V9.0 (All versions), SIMATIC NET PC Software (All versions < V16 update 1), SIMATIC PCS 7 V8.1 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC Route Control V8.1 (All versions), SIMATIC Route Control V8.2 (All versions), SIMATIC Route Control V9.0 (All versions), SIMATIC WinCC (TIA Portal) V13 (All versions < V13 SP2), SIMATIC WinCC (TIA Portal) V14.0.1 (All versions), SIMATIC WinCC (TIA Portal) V15.1 (All versions), SIMATIC WinCC (TIA Portal) V16 (All versions), SIMATIC WinCC V7.3 (All versions), SIMATIC WinCC V7.4 (All versions), SIMATIC WinCC V7.5 (All versions < V7.5.1 Upd1). Through specially crafted messages, when encrypted communication is enabled, an attacker with network access could use the vulnerability to compromise the availability of the system by causing a Denial-of-Service condition. Successful exploitation requires no system privileges and no user interaction.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-03-10T20:15:00.000' AS DateTime), CAST(N'2020-03-16T19:34:00.000' AS DateTime), N'CWE-974', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-284', N'CVE-2019-18275', N'3', N'OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-863', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T21:10:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-352', N'CVE-2019-18271', N'3', N'OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-352', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T20:11:00.000' AS DateTime), NULL, N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-532', N'CVE-2019-18244', N'3', N'OSIsoft PI Vision, PI Vision 2017 R2, PI Vision 2017 R2 SP1, PI Vision 2019. The affected product records the service account password in the installation log files when a non-default service account and password are specified during installation or upgrade.', 4.7, 3.6, 1, N'MEDIUM', N'CWE-532', N'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N', N'LOCAL', N'HIGH', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T20:00:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-532', N'CVE-2019-18275', N'3', N'OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-863', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T21:10:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-532', N'CVE-2019-18271', N'3', N'OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-352', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T20:11:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-016-01', N'CWE-754', N'CVE-2019-6857', N'3', N'A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-754', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-06T23:15:00.000' AS DateTime), CAST(N'2020-01-22T00:15:00.000' AS DateTime), N'CWE-962', N'Exception Management', N'Memory', N'Improper Check for Unusual Conditions')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-016-01', N'CWE-754', N'CVE-2019-6856', N'3', N'A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-754', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-06T23:15:00.000' AS DateTime), CAST(N'2020-01-22T00:15:00.000' AS DateTime), N'CWE-962', N'Exception Management', N'Memory', N'Improper Check for Unusual Conditions')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-016-01', N'CWE-754', N'CVE-2018-7794', N'3', N'A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-754', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-06T23:15:00.000' AS DateTime), CAST(N'2020-01-14T15:11:00.000' AS DateTime), N'CWE-962', N'Exception Management', N'Denial of Service', N'Improper Check for Unusual Conditions')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-016-01', N'CWE-754', N'CVE-2019-6857', N'3', N'A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-754', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-06T23:15:00.000' AS DateTime), CAST(N'2020-01-22T00:15:00.000' AS DateTime), N'CWE-962', N'Exception Management', N'Memory', N'Improper Check for Unusual Conditions')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-016-01', N'CWE-754', N'CVE-2019-6856', N'3', N'A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-754', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-06T23:15:00.000' AS DateTime), CAST(N'2020-01-22T00:15:00.000' AS DateTime), N'CWE-962', N'Exception Management', N'Memory', N'Improper Check for Unusual Conditions')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-016-01', N'CWE-754', N'CVE-2018-7794', N'3', N'A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when reading data with invalid index using Modbus TCP.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-754', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-06T23:15:00.000' AS DateTime), CAST(N'2020-01-14T15:11:00.000' AS DateTime), N'CWE-962', N'Exception Management', N'Denial of Service', N'Improper Check for Unusual Conditions')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-021-01', N'CWE-502', N'CVE-2020-6959', N'3', N'The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to Version NVR 5.6 Build 595 T2-Patch, and MPNVRSWXX prior to Version NVR 5.6 Build 595 T2-Patch are vulnerable to an unsafe deserialization of untrusted data. An attacker may be able to remotely modify deserialized data without authentication using a specially crafted web request, resulting in remote code execution.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-502', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-22T15:15:00.000' AS DateTime), CAST(N'2020-02-05T21:49:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-021-01', N'CWE-89', N'CVE-2020-6960', N'3', N'The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-Patch, MAXPRO NVR: MAXPRO NVR XE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR SE prior to Version NVR 5.6 Build 595 T2-Patch, MAXPRO NVR PE prior to Version NVR 5.6 Build 595 T2-Patch, and MPNVRSWXX prior to Version NVR 5.6 Build 595 T2-Patch contain an SQL injection vulnerability that could give an attacker remote unauthenticated access to the web user interface with administrator-level privileges.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-89', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-22T15:15:00.000' AS DateTime), CAST(N'2020-02-07T17:23:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-353-03', N'CWE-121', N'CVE-2019-18236', N'3', N'Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-119', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-12-23T20:15:00.000' AS DateTime), CAST(N'2020-01-03T15:35:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-353-04', N'CWE-79', N'CVE-2019-18249', N'3', N'Reliable Controls MACH-ProWebCom/Sys, all versions prior to 2.15 (Firmware versions prior to 8.26.4), may allow attacker to execute commands on behalf of the user when an authenticated user clicks on a malicious link.', 6.1, 2.7, 2.8, N'MEDIUM', N'CWE-79', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-12-24T15:15:00.000' AS DateTime), CAST(N'2020-01-07T14:43:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-01', N'CWE-20', N'CVE-2019-13524', N'3', N'GE PACSystems RX3i CPE100/115: All versions prior to R9.85,CPE302/305/310/330/400/410: All versions prior to R9.90,CRU/320 All versions(End of Life) may allow an attacker sending specially manipulated packets to cause the module state to change to halt-mode, resulting in a denial-of-service condition. An operator must reboot the CPU module after removing battery or energy pack to recover from halt-mode.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-16T18:15:00.000' AS DateTime), CAST(N'2020-01-27T17:08:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-02', N'CWE-266', N'CVE-2019-10940', N'3', N'A vulnerability has been identified in SINEMA Server (All versions < V14.0 SP2 Update 1). Incorrect session validation could allow an attacker with a valid session, with low privileges, to perform firmware updates and other administrative operations on connected devices. The security vulnerability could be exploited by an attacker with network access to the affected system. An attacker must have access to a low privileged account in order to exploit the vulnerability. An attacker could use the vulnerability to compromise confidentiality, integrity, and availability of the affected system and underlying components. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.9, 6, 3.1, N'CRITICAL', N'CWE-269', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2020-01-16T16:15:00.000' AS DateTime), CAST(N'2020-01-24T18:16:00.000' AS DateTime), NULL, N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-03', N'CWE-306', N'CVE-2019-13933', N'3', N'A vulnerability has been identified in SCALANCE X-200RNA switch family (All versions), SCALANCE X-300 switch family (incl. X408 and SIPLUS NET variants) (All versions < V4.1.3). Affected devices contain a vulnerability that allows an unauthenticated attacker to violate access-control rules. The vulnerability can be triggered by sending GET request to specific uniform resource locator on the web configuration interface of the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. An attacker could use the vulnerability to obtain sensitive information or change the device configuration. At the time of advisory publication no public exploitation of this security vulnerability was known.', 8.6, 4.7, 3.9, N'HIGH', N'CWE-306', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L', N'NETWORK', N'LOW', N'LOW', N'HIGH', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-16T16:15:00.000' AS DateTime), CAST(N'2020-01-24T16:19:00.000' AS DateTime), N'CWE-952', N'Authentication', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-04', N'CWE-693', N'CVE-2019-19278', N'3', N'A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 (HMIs 12 inches or larger) (All versions), SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... (High Availability) (All versions). The affected device contains a vulnerability that could allow an unauthenticated attacker to restore the affected device to a point where predefined application and operating system protection mechanisms are not in place. Successful exploitation requires physical access to the system, but no system privileges and no user interaction. An attacker could use the vulnerability to compromise confidentialiy, integrity and availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.', 6.8, 5.9, 0.9, N'MEDIUM', N'CWE-20', N'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'PHYSICAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-16T16:15:00.000' AS DateTime), CAST(N'2020-01-24T20:09:00.000' AS DateTime), N'CWE-975', N'Other', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-05', N'CWE-22', N'CVE-2019-10934', N'3', N'A vulnerability has been identified in TIA Portal V14 (All versions), TIA Portal V15 (All versions < V15.1 Upd 4), TIA Portal V16 (All versions). Changing the contents of a configuration file could allow an attacker to execute arbitrary code with SYSTEM privileges. The security vulnerability could be exploited by an attacker with a valid account and limited access rights on the system. No user interaction is required. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-22', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2020-01-16T16:15:00.000' AS DateTime), CAST(N'2020-01-22T14:22:00.000' AS DateTime), N'CWE-981', N'Path Resolution', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-284', N'CVE-2019-18275', N'3', N'OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing analysis data reference attributes.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-863', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T21:10:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-284', N'CVE-2019-18271', N'3', N'OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administration site.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-352', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T20:11:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-284', N'CVE-2019-18244', N'3', N'OSIsoft PI Vision, PI Vision 2017 R2, PI Vision 2017 R2 SP1, PI Vision 2019. The affected product records the service account password in the installation log files when a non-default service account and password are specified during installation or upgrade.', 4.7, 3.6, 1, N'MEDIUM', N'CWE-532', N'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N', N'LOCAL', N'HIGH', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T20:00:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18327', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T14:41:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18328', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T14:36:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18329', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T14:21:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18330', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, and CVE-2019-18329. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T14:32:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-200', N'CVE-2019-18331', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to path and filenames on the server by sending specifically crafted packets to 1099/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-200', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-200', N'CVE-2019-18332', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to directory listings of the server by sending specifically crafted packets to 80/tcp, 8095/tcp or 8080/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-200', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-200', N'CVE-2019-18333', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain access to filenames on the server by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-200', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-200', N'CVE-2019-18334', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to enumerate valid user names by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-200', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-200', N'CVE-2019-18335', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to gain access to logs and configuration files by sending specifically crafted packets to 80/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-200', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-284', N'CVE-2019-18308', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with local access to the MS3000 Server and a low privileged user account could gain root privileges by manipulating specific files in the local file system. This vulnerability is independent from CVE-2019-18309. Please note that an attacker needs to have local access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-269', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T18:36:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-284', N'CVE-2019-18309', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with local access to the MS3000 Server and a low privileged user account could gain root privileges by manipulating specific files in the local file system. This vulnerability is independent from CVE-2019-18308. Please note that an attacker needs to have local access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-269', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T18:35:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-121', N'CVE-2019-18310', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp. This vulnerability is independent from CVE-2019-18311. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T18:29:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-952', N'CVE-2019-18311', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 7061/tcp. This vulnerability is independent from CVE-2019-18310. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-306', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T18:17:00.000' AS DateTime), NULL, N'Other', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18312', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to enumerate running RPC services. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T18:16:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-434', N'CVE-2019-18313', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could gain remote code execution by sending specifically crafted objects to one of the RPC services. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-434', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T16:18:00.000' AS DateTime), NULL, N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18314', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted objects via RMI. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18315', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted packets to 8888/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-502', N'CVE-2019-18316', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted packets to 1099/tcp. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-502', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18317', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from CVE-2019-18318 and CVE-2019-18319. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-232-01', N'CWE-522', N'CVE-2019-10960', N'3', N'Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. If the option to use a passcode to limit the functionality of the front panel is applied, specially crafted packets could be sent over the same network to a port on the printer and the printer will respond with an array of information that includes the front panel passcode for the printer. Once the passcode is retrieved, an attacker must have physical access to the front panel of the printer to enter the passcode to access the full functionality of the front panel.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-255', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-20T21:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-239-01', N'CWE-120', N'CVE-2019-9569', N'3', N'Buffer Overflow in dactetra in Delta Controls enteliBUS Manager V3.40_B-571848 allows remote unauthenticated users to execute arbitrary code and possibly cause a denial of service via unspecified vectors.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-26T20:15:00.000' AS DateTime), CAST(N'2019-09-03T18:34:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-239-02', N'CWE-288', N'CVE-2019-13526', N'3', N'Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-287', N'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-08-30T09:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-246-01', N'CWE-121', N'CVE-2019-13518', N'3', N'An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the EZ Touch Editor Versions 2.1.0 and prior.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-04T15:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-246-02', N'CWE-119', N'CVE-2019-13522', N'3', N'An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-04T15:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-248-01', N'CWE-416', N'CVE-2019-10996', N'3', N'Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that can reference memory after it has been freed.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-416', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-23T16:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-983', N'Resource Management', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-248-01', N'CWE-119', N'CVE-2019-10978', N'3', N'Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that operates outside of the designated memory area.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-119', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-23T16:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-248-01', N'CWE-465', N'CVE-2019-10984', N'3', N'Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, allow multiple vulnerabilities to be exploited when a valid user opens a specially crafted, malicious input file that causes the program to mishandle pointers.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-824', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-23T16:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), NULL, N'Other', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-248-01', N'CWE-321', N'CVE-2019-10990', N'3', N'Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-798', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-23T16:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-950', N'Authentication', N'Default Logins', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-01', N'CWE-121', N'CVE-2019-13540', N'3', N'Delta Electronics TPEditor, Versions 1.94 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to remotely execute arbitrary code.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-119', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-11T21:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-01', N'CWE-122', N'CVE-2019-13536', N'3', N'Delta Electronics TPEditor, Versions 1.94 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, which may allow an attacker to remotely execute arbitrary code.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-120', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-11T21:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-01', N'CWE-787', N'CVE-2019-13544', N'3', N'Delta Electronics TPEditor, Versions 1.94 and prior. Multiple out-of-bounds write vulnerabilities may be exploited by processing specially crafted project files, which may allow remote code execution.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-787', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-11T21:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), NULL, N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-253-02', N'CWE-285', N'CVE-2019-10915', N'3', N'A vulnerability has been identified in TIA Administrator (All versions < V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-264', N'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-07-11T22:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-945', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-255-01', N'CWE-22', N'CVE-2019-13532', N'3', N'CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-22', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-09-13T17:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-981', N'Path Resolution', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-255-01', N'CWE-121', N'CVE-2019-13548', N'3', N'CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-120', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-09-13T17:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-255-02', N'CWE-79', N'CVE-2019-13538', N'3', N'3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.15.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. The issue also exists for source libraries, but 3S-Smart Software Solutions GmbH strongly recommends distributing compiled libraries only.', 8.6, 6, 1.8, N'HIGH', N'CWE-79', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-17T20:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-255-03', N'CWE-732', N'CVE-2019-9008', N'3', N'An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-732', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-09-17T14:15:00.000' AS DateTime), CAST(N'2020-03-11T22:28:00.000' AS DateTime), N'CWE-946', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-255-04', N'CWE-476', N'CVE-2019-13542', N'3', N'3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-476', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-09-17T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-971', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-255-05', N'CWE-390', N'CVE-2019-9009', N'3', N'An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-09-17T16:15:00.000' AS DateTime), CAST(N'2020-03-11T22:28:00.000' AS DateTime), N'CWE-962', N'Exception Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-260-01', N'CWE-94', N'CVE-2019-13558', N'3', N'In WebAccess versions 8.4.1 and prior, an exploit executed over the network may cause improper control of generation of code, which may allow remote code execution, data exfiltration, or cause a system crash.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-94', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-09-18T22:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-991', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-260-01', N'CWE-77', N'CVE-2019-13552', N'3', N'In WebAccess versions 8.4.1 and prior, multiple command injection vulnerabilities are caused by a lack of proper validation of user-supplied data and may allow arbitrary file deletion and remote code execution.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-78', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-09-18T21:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-260-01', N'CWE-121', N'CVE-2019-13556', N'3', N'In WebAccess versions 8.4.1 and prior, multiple stack-based buffer overflow vulnerabilities are caused by a lack of proper validation of the length of user-supplied data. Exploitation of these vulnerabilities may allow remote code execution.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-119', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-09-18T22:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-260-01', N'CWE-285', N'CVE-2019-13550', N'3', N'In WebAccess, versions 8.4.1 and prior, an improper authorization vulnerability may allow an attacker to disclose sensitive information, cause improper control of generation of code, which may allow remote code execution or cause a system crash.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-863', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-09-18T21:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-945', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-260-02', N'CWE-307', N'CVE-2019-13918', N'3', N'A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). The web interface has no means to prevent password guessing attacks. The vulnerability could be exploited by an attacker with network access to the vulnerable software, requiring no privileges and no user interaction. The vulnerability could allow full access to the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-521', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-09-13T17:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-955', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-260-02', N'CWE-352', N'CVE-2019-13920', N'3', N'A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). Some parts of the web application are not protected against Cross Site Request Forgery (CSRF) attacks. The security vulnerability could be exploited by an attacker that is able to trigger requests of a logged-in user to the application. The vulnerability could allow switching the connectivity state of a user or a device. At the time of advisory publication no public exploitation of this security vulnerability was known.', 4.3, 1.4, 2.8, N'MEDIUM', N'CWE-352', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'NONE', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-13T17:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), NULL, N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-260-02', N'CWE-916', N'CVE-2019-13922', N'3', N'A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0 SP1). An attacker with administrative privileges can obtain the hash of a connected device''s password. The security vulnerability could be exploited by an attacker with network access to the SINEMA Remote Connect Server and administrative privileges. At the time of advisory publication no public exploitation of this security vulnerability was known.', 2.7, 1.4, 1.2, N'LOW', N'CWE-916', N'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'HIGH', CAST(N'2019-09-13T17:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), NULL, N'Cryptography', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-262-01', N'CWE-200', N'CVE-2019-8998', N'3', N'An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-200', N'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-07-12T16:15:00.000' AS DateTime), CAST(N'2019-07-16T19:49:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-262-01', N'CWE-285', N'CVE-2019-13528', N'3', N'A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000), and Niagara 4.7u1 (JACE-8000, Edge 10).', 4.4, 3.6, 0.8, N'MEDIUM', N'CWE-287', N'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N', N'LOCAL', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'HIGH', CAST(N'2019-09-24T22:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-945', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-262-01', N'CWE-285', N'CVE-2019-8998', N'3', N'An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-200', N'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-07-12T16:15:00.000' AS DateTime), CAST(N'2019-07-16T19:49:00.000' AS DateTime), N'CWE-945', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-121', N'CVE-2019-12255', N'3', N'Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T20:15:00.000' AS DateTime), CAST(N'2019-10-02T15:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-121', N'CVE-2019-12262', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-284', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-14T20:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-121', N'CVE-2019-12264', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.', 7.1, 4.2, 2.8, N'HIGH', N'CWE-88', N'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H', N'ADJACENT_NETWORK', N'LOW', N'HIGH', N'LOW', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-05T18:15:00.000' AS DateTime), CAST(N'2019-08-16T21:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-121', N'CVE-2019-12256', N'3', N'Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets� IP options.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T18:15:00.000' AS DateTime), CAST(N'2020-02-10T21:49:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-121', N'CVE-2019-12256', N'3', N'Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets� IP options.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T18:15:00.000' AS DateTime), CAST(N'2020-02-10T21:49:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-122', N'CVE-2019-12257', N'3', N'Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'ADJACENT_NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T18:15:00.000' AS DateTime), CAST(N'2019-08-16T21:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-191', N'CVE-2019-12255', N'3', N'Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T20:15:00.000' AS DateTime), CAST(N'2019-10-02T15:15:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-119', N'CVE-2019-12260', N'3', N'Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion caused by a malformed TCP AO option.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T21:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-119', N'CVE-2019-12261', N'3', N'Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T21:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-362', N'CVE-2019-12263', N'3', N'Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition.', 8.1, 5.9, 2.2, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'HIGH', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T19:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-988', N'Synchronisation', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-88', N'CVE-2019-12258', N'3', N'Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-384', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T20:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-476', N'CVE-2019-12264', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.', 7.1, 4.2, 2.8, N'HIGH', N'CWE-88', N'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H', N'ADJACENT_NETWORK', N'LOW', N'HIGH', N'LOW', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-05T18:15:00.000' AS DateTime), CAST(N'2019-08-16T21:15:00.000' AS DateTime), N'CWE-971', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-476', N'CVE-2019-12259', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-476', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T19:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-971', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-88', N'CVE-2019-12259', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-476', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T19:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-88', N'CVE-2019-12264', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.', 7.1, 4.2, 2.8, N'HIGH', N'CWE-88', N'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H', N'ADJACENT_NETWORK', N'LOW', N'HIGH', N'LOW', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-05T18:15:00.000' AS DateTime), CAST(N'2019-08-16T21:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-01', N'CWE-88', N'CVE-2019-12265', N'3', N'Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-399', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T19:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-02', N'CWE-428', N'CVE-2019-6008', N'3', N'An unquoted search path vulnerability in Multiple Yokogawa products for Windows (Exaopc (R1.01.00 ? R3.77.00), Exaplog (R1.10.00 ? R3.40.00), Exaquantum (R1.10.00 ? R3.02.00 and R3.15.00), Exaquantum/Batch (R1.01.00 ? R2.50.40), Exasmoc (all revisions), Exarqe (all revisions), GA10 (R1.01.01 ? R3.05.01), and InsightSuiteAE (R1.01.00 ? R1.06.00)) allow local users to gain privileges via a Trojan horse executable file and execute arbitrary code with eleveted privileges.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-428', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-12-26T16:15:00.000' AS DateTime), CAST(N'2020-01-08T20:39:00.000' AS DateTime), N'CWE-981', N'Path Resolution', N'Other', N'Path Traversal')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-03', N'CWE-20', N'CVE-2019-10969', N'3', N'Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution.', 7.2, 5.9, 1.2, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'HIGH', CAST(N'2019-10-08T19:15:00.000' AS DateTime), CAST(N'2019-10-23T20:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-274-03', N'CWE-284', N'CVE-2019-10963', N'3', N'Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user.', 4.3, 1.4, 2.8, N'MEDIUM', N'CWE-532', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-10-08T19:15:00.000' AS DateTime), CAST(N'2019-10-23T20:15:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-281-01', N'CWE-352', N'CVE-2019-13529', N'3', N'An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which would increase the ease of exploitation.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-352', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-10-09T16:15:00.000' AS DateTime), CAST(N'2019-10-15T16:54:00.000' AS DateTime), NULL, N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-281-03', N'CWE-410', N'CVE-2019-13921', N'3', N'A vulnerability has been identified in SIMATIC WinAC RTX (F) 2010 (All versions < SP3 Update 1). Affected versions of the software contain a vulnerability that could allow an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large HTTP request is sent to the executing service. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the service provided by the software.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-10T14:15:00.000' AS DateTime), CAST(N'2020-01-16T16:15:00.000' AS DateTime), N'CWE-977', N'Other', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-281-04', N'CWE-321', N'CVE-2019-13929', N'3', N'A vulnerability has been identified in SIMATIC IT UADM (All versions < V1.3). An authenticated remote attacker with network access to port 1434/tcp of SIMATIC IT UADM could potentially recover a password that can be used to gain read and write access to the related TeamCenter station. The security vulnerability could be exploited only if the attacker is authenticated. No user interaction is required to exploit this security vulnerability. Successful exploitation of the security vulnerability compromises the confidentiality of the targeted system. At the time of advisory publication no public exploitation of this security vulnerability was known.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-522', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-10-10T14:15:00.000' AS DateTime), CAST(N'2019-10-15T21:26:00.000' AS DateTime), N'CWE-950', N'Authentication', N'Default Logins', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-311-01', N'CWE-400', N'CVE-2019-13555', N'3', N'In Mitsubishi Electric MELSEC-Q Series Q03/04/06/13/26UDVCPU: serial number 21081 and prior, Q04/06/13/26UDPVCPU: serial number 21081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 21081 and prior, MELSEC-L Series L02/06/26CPU, L26CPU-BT: serial number 21101 and prior, L02/06/26CPU-P, L26CPU-PBT: serial number 21101 and prior, and L02/06/26CPU-CM, L26CPU-BT-CM: serial number 21101 and prior, a remote attacker can cause the FTP service to enter a denial-of-service condition dependent on the timing at which a remote attacker connects to the FTP server on the above CPU modules.', 5.9, 3.6, 2.2, N'MEDIUM', N'CWE-400', N'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'HIGH', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-11-13T23:15:00.000' AS DateTime), CAST(N'2019-11-18T16:32:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-79', N'CVE-2018-10700', N'3', N'An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows an attacker to execute XSS by injecting an XSS payload. The POST parameter "iw_board_deviceName" is susceptible to this injection.', 6.1, 2.7, 2.8, N'MEDIUM', N'CWE-79', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-10T23:29:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-283-02', N'CWE-400', N'CVE-2019-10936', N'3', N'A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard Ethernet Controller, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, SIMATIC CFU PA, SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET200AL, SIMATIC ET200AL (incl. SIPLUS variants), SIMATIC ET200M (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN BA (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN HF (incl. SIPLUS variants), SIMATIC ET200MP IM155-5 PN ST (incl. SIPLUS variants), SIMATIC ET200S (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN BA (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HA (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN HS (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN ST (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/2 HF (incl. SIPLUS variants), SIMATIC ET200SP IM155-6 PN/3 HF (incl. SIPLUS variants), SIMATIC ET200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants), SIMATIC ET200ecoPN (except 6ES7148-6JD00-0AB0 and 6ES7146-6FF00-0AB0), SIMATIC ET200pro, SIMATIC ET200pro (incl. SIPLUS variants), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (incl. SIPLUS variants), SIMATIC HMI Comfort Panels 4" - 22" (incl. SIPLUS variants), SIMATIC HMI KTP Mobile Panels, SIMATIC HMI KTP Mobile Panels (incl. SIPLUS variants), SIMATIC PN/PN Coupler (incl. SIPLUS NET variants), SIMATIC PROFINET Driver, SIMATIC S7-1200 CPU family (incl. SIPLUS variants), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-1500 Software Controller, SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants), SIMATIC S7-400 H V6 CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V6 and below CPU family (incl. SIPLUS variants), SIMATIC S7-400 PN/DP V7 CPU family (incl. SIPLUS variants), SIMATIC S7-410 V8 CPU family (incl. SIPLUS variants), SIMATIC WinAC RTX (F) 2010, SINAMICS DCM, SINAMICS DCP, SINAMICS G110M V4.7 PN Control Unit, SINAMICS G120 V4.7 PN Control Unit (incl. SIPLUS variants), SINAMICS G130 V4.7 Control Unit, SINAMICS G150 Control Unit, SINAMICS GH150 V4.7 Control Unit, SINAMICS GL150 V4.7 Control Unit, SINAMICS GM150 V4.7 Control Unit, SINAMICS S110 Control Unit, SINAMICS S120 V4.7 Control Unit (incl. SIPLUS variants), SINAMICS S150 Control Unit, SINAMICS SL150 V4.7 Control Unit, SINAMICS SM120 V4.7 Control Unit, SINUMERIK 828D, SINUMERIK 840D sl. Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large amount of specially crafted UDP packets are sent to device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-10T14:15:00.000' AS DateTime), CAST(N'2020-02-11T16:15:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-290-01', N'CWE-121', N'CVE-2019-13537', N'3', N'The IEC870IP driver for AVEVA�s Vijeo Citect and Citect SCADA and Schneider Electric�s Power SCADA Operation has a buffer overflow vulnerability that could result in a server-side crash.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-14T19:15:00.000' AS DateTime), CAST(N'2020-02-10T21:50:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-290-02', N'CWE-20', N'CVE-2019-13541', N'3', N'In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access information and remotely execute arbitrary code.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-10-18T19:15:00.000' AS DateTime), CAST(N'2019-10-21T13:51:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Other', N'Input Validation')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-290-02', N'CWE-787', N'CVE-2019-13545', N'3', N'In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-787', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-10-18T19:15:00.000' AS DateTime), CAST(N'2019-10-21T13:56:00.000' AS DateTime), NULL, N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-295-01', N'CWE-94', N'CVE-2019-6823', N'3', N'A CWE-94: Code Injection vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-94', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-07-15T21:15:00.000' AS DateTime), CAST(N'2019-10-09T23:51:00.000' AS DateTime), N'CWE-991', N'Tainted Input', N'Other', N'Code Injection')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-295-01', N'CWE-119', N'CVE-2019-6824', N'3', N'A CWE-119: Buffer Errors vulnerability exists in ProClima (all versions prior to version 8.0.0) which allows an unauthenticated, remote attacker to execute arbitrary code on the targeted system in all versions of ProClima prior to version 8.0.0.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-07-15T21:15:00.000' AS DateTime), CAST(N'2019-10-09T23:51:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-295-01', N'CWE-427', N'CVE-2019-6825', N'3', N'A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProClima (all versions prior to version 8.0.0) which could allow a malicious DLL file, with the same name of any resident DLLs inside the software installation, to execute arbitrary code in all versions of ProClima prior to version 8.0.0.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-427', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-07-15T21:15:00.000' AS DateTime), CAST(N'2019-10-09T23:51:00.000' AS DateTime), N'CWE-991', N'Tainted Input', N'Other', N'Untrusted Search Path')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-297-01', N'CWE-306', N'CVE-2019-13549', N'3', N'Rittal Chiller SK 3232-Series web interface as built upon Carel pCOWeb firmware A1.5.3 � B1.2.4. The authentication mechanism on affected systems does not provide a sufficient level of protection against unauthorized configuration changes. Primary operations, namely turning the cooling unit on and off and setting the temperature set point, can be modified without authentication.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-306', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-10-25T18:15:00.000' AS DateTime), CAST(N'2020-02-10T21:50:00.000' AS DateTime), N'CWE-952', N'Authentication', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-311-02', N'CWE-122', N'CVE-2019-18240', N'3', N'In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary code.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-11-13T23:15:00.000' AS DateTime), CAST(N'2019-11-18T14:46:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-318-01', N'CWE-20', N'CVE-2019-13939', N'3', N'A vulnerability has been identified in Nucleus NET (All versions), Nucleus RTOS (All versions), Nucleus ReadyStart for ARM, MIPS, and PPC (All versions < V2017.02.2 with patch "Nucleus 2017.02.02 Nucleus NET Patch"), Nucleus SafetyCert (All versions), Nucleus Source Code (All versions), VSTAR (All versions). By sending specially crafted DHCP packets to a device, an attacker may be able to affect availability and integrity of the device. Adjacent network access, but no authentication and no user interaction is needed to conduct this attack. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.1, 4.2, 2.8, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H', N'ADJACENT_NETWORK', N'LOW', N'HIGH', N'LOW', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-01-16T16:15:00.000' AS DateTime), CAST(N'2020-01-29T15:48:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Other', N'Input Validation')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-318-02', N'CWE-749', N'CVE-2019-13945', N'3', N'A vulnerability has been identified in SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions), SIMATIC S7-200 SMART CPU family (All versions). There is an access mode used during manufacturing of S7-1200 CPUs that allows additional diagnostic functionality. The security vulnerability could be exploited by an attacker with physical access to the UART interface during boot process. At the time of advisory publication no public exploitation of this security vulnerability was known.', 6.8, 5.9, 0.9, N'MEDIUM', N'CWE-20', N'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'PHYSICAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T14:15:00.000' AS DateTime), CAST(N'2019-12-19T18:56:00.000' AS DateTime), N'CWE-975', N'Other', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-318-03', N'CWE-472', N'CVE-2019-13927', N'3', N'A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 (All firmware versions < V6.00.320), Desigo PX automation controllers PXC00-U, PXC64-U, PXC128-U with Desigo PX Web modules PXA30-W0, PXA30-W1, PXA30-W2 (All firmware versions < V6.00.320), Desigo PX automation controllers PXC22.1-E.D, PXC36-E.D, PXC36.1-E.D with activated web server (All firmware versions < V6.00.320). The device contains a vulnerability that could allow an attacker to cause a denial of service condition on the device''s web server by sending a specially crafted HTTP message to the web server port (tcp/80). The security vulnerability could be exploited by an attacker with network access to an affected device. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the availability of the device''s web service. While the device itself stays operational, the web server responds with HTTP status code 404 (Not found) to any further request. A reboot is required to recover the web interface. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-668', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L', N'NETWORK', N'LOW', N'LOW', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T14:15:00.000' AS DateTime), CAST(N'2019-12-30T17:05:00.000' AS DateTime), N'CWE-991', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-318-04', N'CWE-477', N'CVE-2019-18251', N'3', N'In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function vulnerability requiring user interaction to exploit.', 8.8, 5.9, 2.8, N'HIGH', N'NVD-CWE-noinfo', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-11-26T00:15:00.000' AS DateTime), CAST(N'2019-12-11T16:23:00.000' AS DateTime), N'CWE-1001', N'API', N'Other', N'Obsolete Function')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-318-05', N'CWE-288', N'CVE-2019-18250', N'3', N'In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication bypass, which may allow an attacker to remotely bypass authentication and extract credentials from the affected device.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-522', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-11-26T00:15:00.000' AS DateTime), CAST(N'2019-12-12T21:13:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-323-01', N'CWE-20', N'CVE-2018-20031', N'3', N'A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-03-21T21:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-323-01', N'CWE-20', N'CVE-2018-20032', N'3', N'A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-03-21T21:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-323-01', N'CWE-119', N'CVE-2018-20033', N'3', N'A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and the vendor daemon to stop. This would force the vendor daemon to shut down. No exploit of this vulnerability has been demonstrated.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-02-25T20:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-323-01', N'CWE-20', N'CVE-2018-20034', N'3', N'A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-03-21T21:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-119', N'CVE-2018-10701', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_filename" is susceptible to buffer overflow. By crafting a packet that contains a string of 162 characters, it is possible for an attacker to execute the attack.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-11T13:43:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-77', N'CVE-2018-10702', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_filename" is susceptible to command injection via shell metacharacters.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-77', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-10T23:29:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-337-02', N'CWE-119', N'CVE-2018-10703', N'3', N'An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iw_serverip" is susceptible to buffer overflow. By crafting a packet that contains a string of 480 characters, it is possible for an attacker to execute the attack.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-06-07T20:29:00.000' AS DateTime), CAST(N'2019-06-10T23:29:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-339-01', N'CWE-59', N'CVE-2019-18232', N'3', N'SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker with local access to create, write, and/or delete files in system folder using symbolic links, leading to a privilege escalation. This vulnerability could also be used by an attacker to execute a malicious DLL, which could impact the integrity and availability of the system.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-59', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-11T23:15:00.000' AS DateTime), CAST(N'2019-12-19T20:39:00.000' AS DateTime), N'CWE-980', N'Path Resolution', N'Other', N'Link Following')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-339-02', N'CWE-307', N'CVE-2019-16670', N'3', N'An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. The Authentication mechanism has no brute-force prevention.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-307', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-06T18:15:00.000' AS DateTime), CAST(N'2019-12-12T18:42:00.000' AS DateTime), N'CWE-955', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-339-02', N'CWE-400', N'CVE-2019-16671', N'3', N'An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-400', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-06T18:15:00.000' AS DateTime), CAST(N'2019-12-12T18:54:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-339-02', N'CWE-311', N'CVE-2019-16672', N'3', N'An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Sensitive Credentials data is transmitted in cleartext.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-311', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-06T18:15:00.000' AS DateTime), CAST(N'2019-12-10T04:15:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-339-02', N'CWE-256', N'CVE-2019-16673', N'3', N'An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in cleartext and can be read by anyone with access to the device.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-522', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-06T18:15:00.000' AS DateTime), CAST(N'2019-12-10T15:19:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-339-02', N'CWE-341', N'CVE-2019-16674', N'3', N'An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Authentication Information used in a cookie is predictable and can lead to admin password compromise when captured on the network.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-319', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-06T18:15:00.000' AS DateTime), CAST(N'2019-12-12T18:41:00.000' AS DateTime), NULL, N'Information Leakage', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-339-02', N'CWE-341', N'CVE-2019-16672', N'3', N'An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Sensitive Credentials data is transmitted in cleartext.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-311', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-06T18:15:00.000' AS DateTime), CAST(N'2019-12-10T04:15:00.000' AS DateTime), NULL, N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-339-02', N'CWE-341', N'CVE-2019-16670', N'3', N'An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. The Authentication mechanism has no brute-force prevention.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-307', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-06T18:15:00.000' AS DateTime), CAST(N'2019-12-12T18:42:00.000' AS DateTime), NULL, N'Information Leakage', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-339-02', N'CWE-341', N'CVE-2019-16671', N'3', N'An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Remote authenticated users can crash a device with a special packet because of Uncontrolled Resource Consumption.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-400', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-06T18:15:00.000' AS DateTime), CAST(N'2019-12-12T18:54:00.000' AS DateTime), NULL, N'Information Leakage', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-339-02', N'CWE-341', N'CVE-2019-16673', N'3', N'An issue was discovered on Weidmueller IE-SW-VL05M 3.6.6 Build 16102415, IE-SW-VL08MT 3.5.2 Build 16102415, and IE-SW-PL10M 3.3.16 Build 16102416 devices. Passwords are stored in cleartext and can be read by anyone with access to the device.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-522', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-06T18:15:00.000' AS DateTime), CAST(N'2019-12-10T15:19:00.000' AS DateTime), NULL, N'Information Leakage', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18318', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server can cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from CVE-2019-18317 and CVE-2019-18319. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18319', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafted objects via RMI. This vulnerability is independent from CVE-2019-18317 and CVE-2019-18318. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18320', N'3', N'A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please note that an attacker needs to have network access to the Application Server in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-434', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18321', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18322. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.1, 5.2, 3.9, N'CRITICAL', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T15:42:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-287', N'CVE-2019-18322', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18321. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.1, 5.2, 3.9, N'CRITICAL', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T15:41:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18323', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18324, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T15:00:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18324', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18325, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T14:57:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18325', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18326, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T14:55:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18326', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server can cause a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to 5010/tcp. This vulnerability is independent from CVE-2019-18323, CVE-2019-18324, CVE-2019-18325, CVE-2019-18327, CVE-2019-18328, CVE-2019-18329, and CVE-2019-18330. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T14:50:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-317', N'CVE-2019-13947', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The user configuration menu in the web interface of the SiNVR 3 Central Control Server (CCS) transfers user passwords in clear to the client (browser). An attacker with administrative privileges for the web interface could be able to read (and not only reset) passwords of other SiNVR 3 CCS users.', 4.9, 3.6, 1.2, N'MEDIUM', N'CWE-312', N'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'HIGH', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T00:37:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-287', N'CVE-2019-18337', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The SiNVR 3 Central Control Server (CCS) contains an authentication bypass vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. A remote attacker with network access to the CCS server could exploit this vulnerability to read the CCS users database, including the passwords of all users in obfuscated cleartext.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T00:22:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-23', N'CVE-2019-18338', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The SiNVR 3 Central Control Server (CCS) contains a directory traversal vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker with network access to the CCS server could exploit this vulnerability to list arbitrary directories or read files outside of the CCS application context.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-22', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T00:21:00.000' AS DateTime), N'CWE-981', N'Path Resolution', N'Other', N'Path Traversal')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-306', N'CVE-2019-18339', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The HTTP service (default port 5401/tcp) of the SiNVR 3 Video Server contains an authentication bypass vulnerability, even when properly configured with enforced authentication. A remote attacker with network access to the Video Server could exploit this vulnerability to read the SiNVR users database, including the passwords of all users in obfuscated cleartext.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-306', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T00:10:00.000' AS DateTime), N'CWE-952', N'Authentication', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-261', N'CVE-2019-18340', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). Both the SiNVR 3 Video Server and the Central Control Server (CCS) store user and device passwords by applying weak cryptography. A local attacker could exploit this vulnerability to extract the passwords from the user database and/or the device configuration files to conduct further attacks.', 5.5, 3.6, 1.8, N'MEDIUM', N'CWE-200', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'LOCAL', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T00:06:00.000' AS DateTime), N'CWE-959', N'Cryptography', N'Cryptography', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-287', N'CVE-2019-18341', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The SFTP service (default port 22/tcp) of the SiNVR 3 Central Control Server (CCS) contains an authentication bypass vulnerability. A remote attacker with network access to the CCS server could exploit this vulnerability to read data from the EDIR directory (for example, the list of all configured stations).', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T23:50:00.000' AS DateTime), N'CWE-947', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-749', N'CVE-2019-18342', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The SFTP service (default port 22/tcp) of the SiNVR 3 Central Control Server (CCS) does not properly limit its capabilities to the specified purpose. In conjunction with CVE-2019-18341, an unauthenticated remote attacker with network access to the CCS server could exploit this vulnerability to read or delete arbitrary files, or access other resources on the same server.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T23:33:00.000' AS DateTime), N'CWE-975', N'Other', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-749', N'CVE-2019-18338', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The SiNVR 3 Central Control Server (CCS) contains a directory traversal vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker with network access to the CCS server could exploit this vulnerability to list arbitrary directories or read files outside of the CCS application context.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-22', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T00:21:00.000' AS DateTime), N'CWE-975', N'Other', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-749', N'CVE-2019-18341', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The SFTP service (default port 22/tcp) of the SiNVR 3 Central Control Server (CCS) contains an authentication bypass vulnerability. A remote attacker with network access to the CCS server could exploit this vulnerability to read data from the EDIR directory (for example, the list of all configured stations).', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-287', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T23:50:00.000' AS DateTime), N'CWE-975', N'Other', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-749', N'CVE-2019-18339', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The HTTP service (default port 5401/tcp) of the SiNVR 3 Video Server contains an authentication bypass vulnerability, even when properly configured with enforced authentication. A remote attacker with network access to the Video Server could exploit this vulnerability to read the SiNVR users database, including the passwords of all users in obfuscated cleartext.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-306', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T00:10:00.000' AS DateTime), N'CWE-975', N'Other', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-02', N'CWE-749', N'CVE-2019-13947', N'3', N'A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The user configuration menu in the web interface of the SiNVR 3 Central Control Server (CCS) transfers user passwords in clear to the client (browser). An attacker with administrative privileges for the web interface could be able to read (and not only reset) passwords of other SiNVR 3 CCS users.', 4.9, 3.6, 1.2, N'MEDIUM', N'CWE-312', N'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'HIGH', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T00:37:00.000' AS DateTime), N'CWE-975', N'Other', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-03', N'CWE-119', N'CVE-2018-18440', N'3', N'DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2018-11-20T19:29:00.000' AS DateTime), CAST(N'2019-12-10T14:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-03', N'CWE-399', N'CVE-2019-13103', N'3', N'A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.', 7.1, 5.2, 1.8, N'HIGH', N'CWE-399', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'NONE', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-07-29T15:15:00.000' AS DateTime), CAST(N'2019-12-11T22:14:00.000' AS DateTime), NULL, N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-03', N'CWE-399', N'CVE-2018-18440', N'3', N'DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem loading is mishandled.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2018-11-20T19:29:00.000' AS DateTime), CAST(N'2019-12-10T14:15:00.000' AS DateTime), NULL, N'Resource Management', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-04', N'CWE-327', N'CVE-2019-10929', N'3', N'A vulnerability has been identified in SIMATIC CP 1626 (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions <= 20.8), SIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC (All versions), SIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC2 (All versions), SIMATIC HMI Panel (incl. SIPLUS variants) (All versions), SIMATIC NET PC Software (All versions), SIMATIC S7 PLCSIM Advanced (All versions <= V3.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions <= V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), excluding CPU 1518 MFP (and related SIPLUS variant) (All versions <= V2.8.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), excluding CPU 1518-4 PN/DP and CPU 1518 MFP (and related SIPLUS variant) (All versions <= V2.8.1), SIMATIC S7-1500 Software Controller (All versions <= V20.8), SIMATIC STEP 7 (TIA Portal) (All versions < V16), SIMATIC WinCC (TIA Portal) (All versions < V16), SIMATIC WinCC OA (All versions <= 3.15), SIMATIC WinCC Runtime Advanced (All versions), SIMATIC WinCC Runtime Professional (All versions), TIM 1531 IRC (incl. SIPLUS variant) (All versions). An attacker in a Man-in-the-Middle position could potentially modify network traffic exchanged on port 102/tcp to PLCs of the SIMATIC S7-1200, SIMATIC S7-1500 and SIMATIC SoftwareController CPU families, due to certain properties in the calculation used for integrity protection. In order to exploit the vulnerability, an attacker must be able to perform a Man-in-the-Middle attack. The vulnerability could impact the integrity of the communication. No public exploitation of the vulnerability was known at the time of advisory publication.', 5.9, 3.6, 2.2, N'MEDIUM', N'CWE-284', N'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N', N'NETWORK', N'HIGH', N'NONE', N'HIGH', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-13T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-958', N'Cryptography', N'Cryptography', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-05', N'CWE-352', N'CVE-2019-13930', N'3', N'A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting user is tricked into accessing a malicious link. Successful exploitation requires user interaction by a legitimate user, who must be authenticated to the web interface. A successful attack could allow an attacker to trigger actions via the web interface that the legitimate user is allowed to perform. This could allow the attacker to read or modify contents of the web application. At the time of advisory publication no public exploitation of this security vulnerability was known.', 8.1, 5.2, 2.8, N'HIGH', N'CWE-352', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-19T14:38:00.000' AS DateTime), NULL, N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-05', N'CWE-80', N'CVE-2019-13931', N'3', N'A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web interface could allow for an an attacker to craft the input in a form that is not expected, causing the application to behave in unexpected ways for legitimate users. Successful exploitation requires for an attacker to be authenticated to the web interface. A successful attack could cause the application to have unexpected behavior. This could allow the attacker to modify contents of the web application. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.4, 2.7, 2.3, N'MEDIUM', N'CWE-79', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'LOW', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-19T17:27:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-05', N'CWE-20', N'CVE-2019-13932', N'3', N'A vulnerability has been identified in XHQ (All versions < V6.0.0.2). The web application requests could be manipulated, causing the the application to behave in unexpected ways for legitimate users. Successful exploitation does not require for an attacker to be authenticated. A successful attack could allow the import of scripts or generation of malicious links. This could allow the attacker to read or modify contents of the web application. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.1, 5.2, 3.9, N'CRITICAL', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-19T17:55:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18290', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T15:20:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-06', N'CWE-353', N'CVE-2019-10943', N'3', N'A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions <= 20.8), SIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC (All versions), SIMATIC ET200SP (incl. SIPLUS variants) Open Controller CPU 1515SP PC2 (All versions), SIMATIC S7 PLCSIM Advanced (All versions <= V3.0), SIMATIC S7-1200 CPU family (incl. SIPLUS variants) (All versions <= V4.4), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), excluding CPU 1518 MFP (and related SIPLUS variant) (All versions <= V2.8.1), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants), excluding CPU 1518-4 PN/DP and CPU 1518 MFP (and related SIPLUS variant) (All versions <= V2.8.1), SIMATIC S7-1500 Software Controller (All versions <= V20.8). An attacker with network access to port 102/tcp could potentially modify the user program on the PLC in a way that the running code is different from the source code which is stored on the device. An attacker must have network access to affected devices and must be able to perform changes to the user program. The vulnerability could impact the perceived integrity of the user program stored on the CPU. An engineer that tries to obtain the code of the user program running on the device, can receive different source code that is not actually running on the device. No public exploitation of the vulnerability was known at the time of advisory publication.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-284', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-13T19:15:00.000' AS DateTime), CAST(N'2020-03-10T20:15:00.000' AS DateTime), N'CWE-957', N'Channel', N'Other', N'Lack of Integrity Checks')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-07', N'CWE-119', N'CVE-2019-13942', N'3', N'A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module IEC104 variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). An unauthorized user could exploit a buffer overflow vulnerability in the webserver. Specially crafted packets sent could cause a Denial-of-Service condition and if certain conditions are met, the affected devices must be restarted manually to fully recover. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-119', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-19T22:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-07', N'CWE-79', N'CVE-2019-13943', N'3', N'A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module IEC104 variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). The web interface could allow Cross-Site Scripting (XSS) attacks if an attacker is able to modify content of particular web pages, causing the application to behave in unexpected ways for legitimate users. Successful exploitation does not require for an attacker to be authenticated to the web interface. This could allow the attacker to read or modify contents of the web application. At the time of advisory publication no public exploitation of this security. vulnerability was known.', 6.1, 2.7, 2.8, N'MEDIUM', N'CWE-79', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-19T23:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-344-07', N'CWE-23', N'CVE-2019-13944', N'3', N'A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100 Ethernet module IEC104 variant (All versions), EN100 Ethernet module Modbus TCP variant (All versions), EN100 Ethernet module PROFINET IO variant (All versions). A vulnerability in the integrated web server of the affected devices could allow unauthorized attackers to obtain sensitive information about the device, including logs and configurations. At the time of advisory publication no public exploitation of this security vulnerability was known.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-22', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-19T23:15:00.000' AS DateTime), N'CWE-981', N'Path Resolution', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-346-01', N'CWE-121', N'CVE-2019-18257', N'3', N'In Advantech DiagAnywhere Server, Versions 3.07.11 and prior, multiple stack-based buffer overflow vulnerabilities exist in the file transfer service listening on the TCP port. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code with the privileges of the user running DiagAnywhere Server.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-17T23:15:00.000' AS DateTime), CAST(N'2020-02-11T20:45:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-346-02', N'CWE-290', N'CVE-2019-18259', N'3', N'In Omron PLC CJ series, all versions and Omron PLC CS series, all versions, an attacker could spoof arbitrary messages or execute commands.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-290', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-16T20:15:00.000' AS DateTime), CAST(N'2019-12-27T15:28:00.000' AS DateTime), N'CWE-956', N'Channel', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-346-02', N'CWE-294', N'CVE-2019-13533', N'3', N'In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, an attacker could monitor traffic between the PLC and the controller and replay requests that could result in the opening and closing of industrial valves.', 8.1, 5.3, 2.2, N'HIGH', N'CWE-294', N'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H', N'NETWORK', N'HIGH', N'HIGH', N'LOW', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-16T20:15:00.000' AS DateTime), CAST(N'2020-01-02T19:53:00.000' AS DateTime), N'CWE-956', N'Channel', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-346-02', N'CWE-412', N'CVE-2019-18269', N'3', N'In Omron PLC CJ series, all versions, and Omron PLC CS series, all versions, the software properly checks for the existence of a lock, but the lock can be externally controlled or influenced by an actor that is outside of the intended sphere of control.', 9.8, 5.9, 3.9, N'CRITICAL', N'NVD-CWE-Other', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-16T20:15:00.000' AS DateTime), CAST(N'2019-12-27T15:02:00.000' AS DateTime), N'CWE-989', N'Synchronisation', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-346-03', N'CWE-307', N'CVE-2019-18261', N'3', N'In Omron PLC CS series, all versions, Omron PLC CJ series, all versions, and Omron PLC NJ series, all versions, the software does not implement sufficient measures to prevent multiple failed authentication attempts within in a short time frame, making it more susceptible to brute force attacks.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-307', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-16T20:15:00.000' AS DateTime), CAST(N'2019-12-27T15:21:00.000' AS DateTime), N'CWE-955', N'Authentication', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-01', N'CWE-125', N'CVE-2019-10992', N'3', N'Delta Electronics CNCSoft ScreenEditor, Versions 1.00.89 and prior. Multiple out-of-bounds read vulnerabilities may cause information disclosure due to lacking user input validation for processing project files.', 5.5, 3.6, 1.8, N'MEDIUM', N'CWE-125', N'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'LOCAL', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-07-24T15:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-02', N'CWE-434', N'CVE-2019-10935', N'3', N'A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All versions < V8.2 SP1 with WinCC V7.4 SP1 Upd 11), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP2 with WinCC V7.4 SP1 Upd11), SIMATIC WinCC Professional (TIA Portal V13) (All versions), SIMATIC WinCC Professional (TIA Portal V14) (All versions < V14 SP1 Upd 9), SIMATIC WinCC Professional (TIA Portal V15) (All versions < V15.1 Upd 3), SIMATIC WinCC Runtime Professional V13 (All versions), SIMATIC WinCC Runtime Professional V14 (All versions < V14.1 Upd 8), SIMATIC WinCC Runtime Professional V15 (All versions < V15.1 Upd 3), SIMATIC WinCC V7.2 and earlier (All versions), SIMATIC WinCC V7.3 (All versions < V7.3 Upd 19), SIMATIC WinCC V7.4 (All versions < V7.4 SP1 Upd 11), SIMATIC WinCC V7.5 (All versions < V7.5 Upd 3). The SIMATIC WinCC DataMonitor web application of the affected products allows to upload arbitrary ASPX code. The security vulnerability could be exploited by an authenticated attacker with network access to the WinCC DataMonitor application. No user interaction is required to exploit this vulnerability. The vulnerability impacts confidentiality, integrity, and availability of the affected device. At the stage of publishing this security advisory no public exploitation is known.', 7.2, 5.9, 1.2, N'HIGH', N'CWE-434', N'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'HIGH', CAST(N'2019-07-11T22:15:00.000' AS DateTime), CAST(N'2019-10-10T14:15:00.000' AS DateTime), NULL, N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-03', N'CWE-284', N'CVE-2019-10915', N'3', N'A vulnerability has been identified in TIA Administrator (All versions < V1.0 SP1 Upd1). The integrated configuration web application (TIA Administrator) allows to execute certain application commands without proper authentication. The vulnerability could be exploited by an attacker with local access to the affected system. Successful exploitation requires no privileges and no user interaction. An attacker could use the vulnerability to compromise confidentiality and integrity and availability of the affected system. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-264', N'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-07-11T22:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-04', N'CWE-20', N'CVE-2011-3389', N'2', N'The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a "BEAST" attack.', 4.3, NULL, NULL, N'MEDIUM', N'CWE-20', N'AV:N/AC:M/Au:N/C:P/I:N/A:N', N'NETWORK', N'MEDIUM', N'NONE', N'NONE', N'PARTIAL', N'0', N'0', N'0', N'0', NULL, CAST(N'2011-09-06T19:55:00.000' AS DateTime), CAST(N'2018-10-12T22:01:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Cryptography', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-04', N'CWE-310', N'CVE-2016-6329', N'3', N'OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack.', 5.9, 3.6, 2.2, N'MEDIUM', N'CWE-200', N'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'HIGH', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2017-01-31T22:59:00.000' AS DateTime), CAST(N'2019-07-09T13:15:00.000' AS DateTime), NULL, N'Cryptography', N'Cryptography', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-04', N'CWE-310', N'CVE-2013-0169', N'2', N'The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the "Lucky Thirteen" issue.', 2.6, NULL, NULL, N'LOW', N'CWE-310', N'AV:N/AC:H/Au:N/C:P/I:N/A:N', N'NETWORK', N'HIGH', N'NONE', N'NONE', N'PARTIAL', N'0', N'0', N'0', N'0', NULL, CAST(N'2013-02-08T19:55:00.000' AS DateTime), CAST(N'2019-10-09T23:06:00.000' AS DateTime), NULL, N'Cryptography', N'Cryptography', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-05', N'CWE-20', N'CVE-2018-20031', N'3', N'A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-03-21T21:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-05', N'CWE-20', N'CVE-2018-20032', N'3', N'A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-03-21T21:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-05', N'CWE-119', N'CVE-2018-20033', N'3', N'A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and the vendor daemon to stop. This would force the vendor daemon to shut down. No exploit of this vulnerability has been demonstrated.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-02-25T20:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18291', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18292, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T15:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18292', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18294, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-17T13:38:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18293', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18289, CVE-2019-18295, and CVE-2019-18296. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T15:14:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18294', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18298, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T14:55:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18295', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18289, CVE-2019-18293, and CVE-2019-18296. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T13:28:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18296', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition and potentially gain remote code execution by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18289, CVE-2019-18293, and CVE-2019-18295. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T13:26:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-122', N'CVE-2019-18297', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with local access to the MS3000 Server and low privileges could gain root privileges by sending specifically crafted packets to a named pipe. Please note that an attacker needs to have local access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-787', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T13:23:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-351-02', N'CWE-190', N'CVE-2019-18298', N'3', N'A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could trigger a Denial-of-Service condition by sending specifically crafted packets to port 5010/tcp. This vulnerability is independent from CVE-2019-18290, CVE-2019-18291, CVE-2019-18292, CVE-2019-18294, CVE-2019-18299, CVE-2019-18300, CVE-2019-18301, CVE-2019-18302, CVE-2019-18303, CVE-2019-18304, CVE-2019-18305, CVE-2019-18306, and CVE-2019-18307. Please note that an attacker needs to have network access to the MS3000 in order to exploit this vulnerability. At the time of advisory publication no public exploitation of this security vulnerability was known.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-190', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-12-12T19:15:00.000' AS DateTime), CAST(N'2019-12-18T15:07:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-06', N'CWE-787', N'CVE-2019-6827', N'3', N'A CWE-787: Out-of-bounds Write vulnerability exists in Interactive Graphical SCADA System (IGSS), Version 14 and prior, which could cause a software crash when data in the mdb database is manipulated.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-787', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-07-15T21:15:00.000' AS DateTime), CAST(N'2019-07-22T19:15:00.000' AS DateTime), NULL, N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-07', N'CWE-20', N'CVE-2018-20031', N'3', N'A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-03-21T21:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-07', N'CWE-20', N'CVE-2018-20032', N'3', N'A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-03-21T21:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-07', N'CWE-119', N'CVE-2018-20033', N'3', N'A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and the vendor daemon to stop. This would force the vendor daemon to shut down. No exploit of this vulnerability has been demonstrated.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-02-25T20:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-192-07', N'CWE-20', N'CVE-2018-20034', N'3', N'A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon to stop, and the vendor daemon to shut down.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-03-21T21:29:00.000' AS DateTime), CAST(N'2019-07-15T13:15:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-199-01', N'CWE-428', N'CVE-2019-7590', N'3', N'ExacqVision Server�s services ''exacqVisionServer'', ''dvrdhcpserver'' and ''mdnsresponder'' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to elevate privileges on the system. This issue affects: Exacq Technologies, Inc. exacqVision Server 9.6; 9.8. This issue does not affect: Exacq Technologies, Inc. exacqVision Server version 9.4 and prior versions; 19.03. It is not known whether this issue affects: Exacq Technologies, Inc. exacqVision Server versions prior to 8.4.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-428', N'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-07-19T21:15:00.000' AS DateTime), CAST(N'2020-02-10T21:53:00.000' AS DateTime), N'CWE-981', N'Path Resolution', N'Other', N'Path Traversal')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-204-01', N'CWE-611', N'CVE-2019-10976', N'3', N'Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project and/or template file (.frc2). Once a user opens the file, the attacker could read arbitrary files.', 5.5, 3.6, 1.8, N'MEDIUM', N'CWE-611', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N', N'LOCAL', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-07-26T00:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-204-01', N'CWE-400', N'CVE-2019-10972', N'3', N'Mitsubishi Electric FR Configurator2, Version 1.16S and prior. This vulnerability can be triggered when an attacker provides the target with a rogue project file (.frc2). Once a user opens the rogue project, CPU exhaustion occurs, which causes the software to quit responding until the application is restarted.', 5.5, 3.6, 1.8, N'MEDIUM', N'CWE-400', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H', N'LOCAL', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-07-26T00:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-204-02', N'CWE-121', N'CVE-2019-10974', N'3', N'NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code.', 5.5, 3.6, 1.8, N'MEDIUM', N'CWE-119', N'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N', N'LOCAL', N'LOW', N'NONE', N'HIGH', N'NONE', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-07-26T00:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-121', N'CVE-2019-12256', N'3', N'Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets� IP options.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T18:15:00.000' AS DateTime), CAST(N'2020-02-10T21:49:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-121', N'CVE-2019-12256', N'3', N'Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the parsing of IPv4 packets� IP options.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T18:15:00.000' AS DateTime), CAST(N'2020-02-10T21:49:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-122', N'CVE-2019-12257', N'3', N'Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipdhcpc.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'ADJACENT_NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T18:15:00.000' AS DateTime), CAST(N'2019-08-16T21:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-191', N'CVE-2019-12255', N'3', N'Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T20:15:00.000' AS DateTime), CAST(N'2019-10-02T15:15:00.000' AS DateTime), N'CWE-998', N'Risky Values', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-119', N'CVE-2019-12261', N'3', N'Wind River VxWorks 6.7 though 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 3 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer state confusion during connect() to a remote host.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-119', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T21:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-362', N'CVE-2019-12263', N'3', N'Wind River VxWorks 6.9.4 and vx7 has a Buffer Overflow in the TCP component (issue 4 of 4). There is an IPNET security vulnerability: TCP Urgent Pointer state confusion due to race condition.', 8.1, 5.9, 2.2, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'HIGH', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T19:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-988', N'Synchronisation', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-88', N'CVE-2019-12258', N'3', N'Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-384', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T20:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-476', N'CVE-2019-12264', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.', 7.1, 4.2, 2.8, N'HIGH', N'CWE-88', N'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H', N'ADJACENT_NETWORK', N'LOW', N'HIGH', N'LOW', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-05T18:15:00.000' AS DateTime), CAST(N'2019-08-16T21:15:00.000' AS DateTime), N'CWE-971', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-476', N'CVE-2019-12259', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-476', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T19:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-971', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-88', N'CVE-2019-12262', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and 7 has Incorrect Access Control in the RARP client component. IPNET security vulnerability: Handling of unsolicited Reverse ARP replies (Logical Flaw).', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-284', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-14T20:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-88', N'CVE-2019-12259', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9 and vx7 has an array index error in the IGMPv3 client component. There is an IPNET security vulnerability: DoS via NULL dereference in IGMP parsing.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-476', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T19:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-88', N'CVE-2019-12264', N'3', N'Wind River VxWorks 6.6, 6.7, 6.8, 6.9.3, 6.9.4, and Vx7 has Incorrect Access Control in IPv4 assignment by the ipdhcpc DHCP client component.', 7.1, 4.2, 2.8, N'HIGH', N'CWE-88', N'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H', N'ADJACENT_NETWORK', N'LOW', N'HIGH', N'LOW', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-05T18:15:00.000' AS DateTime), CAST(N'2019-08-16T21:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-01', N'CWE-88', N'CVE-2019-12265', N'3', N'Wind River VxWorks 6.5, 6.6, 6.7, 6.8, 6.9.3 and 6.9.4 has a Memory Leak in the IGMPv3 client component. There is an IPNET security vulnerability: IGMP Information leak via IGMPv3 specific membership report.', 5.3, 1.4, 3.9, N'MEDIUM', N'CWE-399', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-09T19:15:00.000' AS DateTime), CAST(N'2019-09-10T13:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-02', N'CWE-78', N'CVE-2019-7670', N'3', N'Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component, which could allow attackers to execute commands directly on the operating system.', 7.2, 5.9, 1.2, N'HIGH', N'CWE-77', N'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'HIGH', CAST(N'2019-07-01T19:15:00.000' AS DateTime), CAST(N'2019-07-31T15:15:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-02', N'CWE-434', N'CVE-2019-7669', N'3', N'Prima Systems FlexAir, Versions 2.3.38 and prior. Improper validation of file extensions when uploading files could allow a remote authenticated attacker to upload and execute malicious applications within the application�s web root with root privileges.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-77', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-07-01T19:15:00.000' AS DateTime), CAST(N'2020-02-10T21:53:00.000' AS DateTime), NULL, N'Tainted Input', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-02', N'CWE-352', N'CVE-2019-7281', N'3', N'Prima Systems FlexAir, Versions 2.3.38 and prior. An unauthenticated user can send unverified HTTP requests, which may allow the attacker to perform certain actions with administrative privileges if a logged-in user visits a malicious website.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-352', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-07-01T19:15:00.000' AS DateTime), CAST(N'2019-07-31T15:15:00.000' AS DateTime), NULL, N'Tainted Input', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-02', N'CWE-334', N'CVE-2019-7280', N'3', N'Prima Systems FlexAir, Versions 2.3.38 and prior. The session-ID is of an insufficient length and can be exploited by brute force, which may allow a remote attacker to obtain a valid session and bypass authentication.', 4.3, 1.4, 2.8, N'MEDIUM', N'CWE-613', N'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-07-01T19:15:00.000' AS DateTime), CAST(N'2019-07-31T16:15:00.000' AS DateTime), NULL, N'Other', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-02', N'CWE-79', N'CVE-2019-7671', N'3', N'Prima Systems FlexAir, Versions 2.3.38 and prior. Parameters sent to scripts are not properly sanitized before being returned to the user, which may allow an attacker to execute arbitrary code in a user�s browser session in context of an affected site.', 5.4, 2.7, 2.3, N'MEDIUM', N'CWE-79', N'CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'LOW', CAST(N'2019-06-05T19:29:00.000' AS DateTime), CAST(N'2020-02-10T21:53:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-02', N'CWE-530', N'CVE-2019-7667', N'3', N'Prima Systems FlexAir, Versions 2.3.38 and prior. The application generates database backup files with a predictable name, and an attacker can use brute force to identify the database backup file name. A malicious actor can exploit this issue to download the database file and disclose login information, which can allow the attacker to bypass authentication and have full access to the system.', 9.1, 5.2, 3.9, N'CRITICAL', N'CWE-287', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-07-01T19:15:00.000' AS DateTime), CAST(N'2019-07-31T15:15:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-02', N'CWE-798', N'CVE-2019-7672', N'3', N'Prima Systems FlexAir, Versions 2.3.38 and prior. The flash version of the web interface contains a hard-coded username and password, which may allow an authenticated attacker to escalate privileges.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-798', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-06-05T19:29:00.000' AS DateTime), CAST(N'2019-07-31T16:15:00.000' AS DateTime), NULL, N'Authentication', N'Default Logins', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-211-02', N'CWE-434', N'CVE-2019-9189', N'3', N'Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately executed because of root code execution, not as a web server user, allowing an authenticated attacker to gain full system access.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-434', N'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-06-05T18:29:00.000' AS DateTime), CAST(N'2019-07-31T16:15:00.000' AS DateTime), NULL, N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-01', N'CWE-787', N'CVE-2019-10961', N'3', N'In Advantech WebAccess HMI Designer Version 2.1.9.23 and prior, processing specially crafted MCR files lacking proper validation of user supplied data may cause the system to write outside the intended buffer area, allowing remote code execution.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-787', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-08-02T17:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), NULL, N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-02', N'CWE-125', N'CVE-2019-13512', N'3', N'Fuji Electric FRENIC Loader 3.5.0.0 and prior is vulnerable to an out-of-bounds read vulnerability, which may allow an attacker to read limited information from the device.', 3.3, 1.4, 1.8, N'LOW', N'CWE-125', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N', N'LOCAL', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-08-15T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-03', N'CWE-283', N'CVE-2019-9010', N'3', N'An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control V3 Runtime System Toolkit, CODESYS Gateway V3, CODESYS V3 Development System.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-284', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-15T18:15:00.000' AS DateTime), CAST(N'2020-03-11T22:28:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-03', N'CWE-789', N'CVE-2019-9012', N'3', N'An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS products and may result in a denial-of-service condition. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control V3 Runtime System Toolkit, CODESYS Gateway V3, CODESYS V3 Development System.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-15T18:15:00.000' AS DateTime), CAST(N'2020-03-11T22:28:00.000' AS DateTime), NULL, N'Other', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-04', N'CWE-522', N'CVE-2019-9013', N'3', N'An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected during transport. All variants of the following CODESYS V3 products in all versions containing the CmpUserMgr component are affected regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A/iMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control RTE V3, CODESYS Control RTE V3 (for Beckhoff CX), CODESYS Control Win V3 (also part of the CODESYS Development System setup), CODESYS V3 Simulation Runtime (part of the CODESYS Development System), CODESYS Control V3 Runtime System Toolkit, CODESYS HMI V3.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-255', N'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'ADJACENT_NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-15T17:15:00.000' AS DateTime), CAST(N'2020-03-11T22:28:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-05', N'CWE-200', N'CVE-2019-13511', N'3', N'Rockwell Automation Arena Simulation Software versions 16.00.00 and earlier contain an INFORMATION EXPOSURE CWE-200. A maliciously crafted Arena file opened by an unsuspecting user may result in the limited exposure of information related to the targeted workstation.', 3.3, 1.4, 1.8, N'LOW', N'CWE-200', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N', N'LOCAL', N'LOW', N'NONE', N'NONE', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-08-15T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-05', N'CWE-843', N'CVE-2019-13519', N'3', N'A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-843', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2020-01-27T23:15:00.000' AS DateTime), CAST(N'2020-02-03T16:45:00.000' AS DateTime), NULL, N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-05', N'CWE-357', N'CVE-2019-13521', N'3', N'A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure of information related to the targeted workstation. Rockwell Automation has released version 16.00.01 of Arena Simulation Software to address the reported vulnerabilities.', 7.8, 5.9, 1.8, N'HIGH', N'NVD-CWE-Other', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2020-01-27T23:15:00.000' AS DateTime), CAST(N'2020-02-03T17:12:00.000' AS DateTime), N'CWE-996', N'UI', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-05', N'CWE-824', N'CVE-2019-13527', N'3', N'In Rockwell Automation Arena Simulation Software Cat. 9502-Ax, Versions 16.00.00 and earlier, a maliciously crafted Arena file opened by an unsuspecting user may result in the use of a pointer that has not been initialized.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-824', N'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-24T22:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), NULL, N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-79', N'CVE-2019-18273', N'3', N'OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced.', 4.8, 2.7, 1.7, N'MEDIUM', N'CWE-79', N'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'HIGH', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T20:56:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-014-06', N'CWE-532', N'CVE-2019-18273', N'3', N'OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced.', 4.8, 2.7, 1.7, N'MEDIUM', N'CWE-79', N'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'HIGH', CAST(N'2020-01-15T19:15:00.000' AS DateTime), CAST(N'2020-01-23T20:56:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-049-01', N'CWE-269', N'CVE-2020-6968', N'3', N'Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-269', N'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2020-02-20T21:15:00.000' AS DateTime), CAST(N'2020-02-28T15:48:00.000' AS DateTime), NULL, N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-213-06', N'CWE-843', N'CVE-2019-10980', N'3', N'A type confusion vulnerability may be exploited when LAquis SCADA 4.3.1.71 processes a specially crafted project file. This may allow an attacker to execute remote code. The attacker must have local access to the system. A CVSS v3 base score of 7.8 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).', 7.8, 5.9, 1.8, N'HIGH', N'CWE-704', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-08-05T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), NULL, N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-225-01', N'CWE-125', N'CVE-2019-13513', N'3', N'In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger multiple out-of-bounds read vulnerabilities, which may allow information disclosure, remote code execution, or crash of the application.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-125', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-08-15T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-225-01', N'CWE-416', N'CVE-2019-13514', N'3', N'In Delta Industrial Automation DOPSoft, Version 4.00.06.15 and prior, processing a specially crafted project file may trigger a use-after-free vulnerability, which may allow information disclosure, remote code execution, or crash of the application.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-416', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-08-15T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-983', N'Resource Management', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-225-02', N'CWE-532', N'CVE-2019-13515', N'3', N'OSIsoft PI Web API 2018 and prior may allow disclosure of sensitive information.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-532', N'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N', N'NETWORK', N'LOW', N'NONE', N'NONE', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-08-15T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-963', N'Information Leakage', N'Information Leakage', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-225-02', N'CWE-693', N'CVE-2019-13516', N'3', N'In OSIsoft PI Web API and prior, the affected product is vulnerable to a direct attack due to a cross-site request forgery protection setting that has not taken effect.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-352', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-08-15T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:46:00.000' AS DateTime), N'CWE-975', N'Other', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-225-03', N'CWE-410', N'CVE-2019-10942', N'3', N'A vulnerability has been identified in SCALANCE X-200 (All versions), SCALANCE X-200IRT (All versions), SCALANCE X-200RNA (All versions). The device contains a vulnerability that could allow an attacker to trigger a denial-of-service condition by sending large message packages repeatedly to the telnet service. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise availability of the device. At the time of advisory publication no public exploitation of this security vulnerability was known.', 8.6, 4, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-13T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-977', N'Other', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-227-01', N'CWE-323', N'CVE-2019-7593', N'3', N'Metasys� ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP).', 9.1, 5.2, 3.9, N'CRITICAL', N'CWE-798', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-20T19:15:00.000' AS DateTime), CAST(N'2020-02-10T21:53:00.000' AS DateTime), N'CWE-959', N'Cryptography', N'Cryptography', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-227-01', N'CWE-321', N'CVE-2019-7594', N'3', N'Metasys� ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal (SMP).', 9.1, 5.2, 3.9, N'CRITICAL', N'CWE-798', N'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-08-20T19:15:00.000' AS DateTime), CAST(N'2020-02-10T21:53:00.000' AS DateTime), N'CWE-950', N'Authentication', N'Default Logins', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-227-02', N'CWE-121', N'CVE-2019-13520', N'3', N'Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. An attacker could use specially crafted project files to overflow the buffer and execute code under the privileges of the application.', 7.8, 5.9, 1.8, N'HIGH', N'CWE-119', N'CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H', N'LOCAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-08-20T20:15:00.000' AS DateTime), CAST(N'2019-09-05T21:15:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-227-03', N'CWE-710', N'CVE-2019-10927', N'3', N'A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-08-13T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-978', N'Other', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-227-03', N'CWE-710', N'CVE-2019-10927', N'3', N'A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG (V4.1). An authenticated attacker with network access to to port 22/tcp of an affected device may cause a Denial-of-Service condition. The security vulnerability could be exploited by an authenticated attacker with network access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the availability of the affected device.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-20', N'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-08-13T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-978', N'Other', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-19-227-03', N'CWE-710', N'CVE-2019-10928', N'3', N'A vulnerability has been identified in SCALANCE SC-600 (V2.0). An authenticated attacker with access to port 22/tcp as well as physical access to an affected device may trigger the device to allow execution of arbitrary commands. The security vulnerability could be exploited by an authenticated attacker with physical access to the affected device. No user interaction is required to exploit this vulnerability. The vulnerability impacts the confidentiality, integrity and availability of the affected device.', 6.6, 5.9, 0.7, N'MEDIUM', N'CWE-77', N'CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'PHYSICAL', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-08-13T19:15:00.000' AS DateTime), CAST(N'2019-10-09T23:45:00.000' AS DateTime), N'CWE-978', N'Other', N'Authentication', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-10', N'CWE-80', N'CVE-2019-6585', N'3', N'A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0), SCALANCE S612 (All versions >= V3.0), SCALANCE S623 (All versions >= V3.0), SCALANCE S627-2M (All versions >= V3.0). The integrated configuration web server of the affected devices could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. The user must be logged into the web interface in order for the exploitation to succeed. At the stage of publishing this security advisory no public exploitation is known. The vendor has confirmed the vulnerability and provides mitigations to resolve it.', 6.1, 2.7, 2.8, N'MEDIUM', N'CWE-79', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N', N'NETWORK', N'LOW', N'NONE', N'LOW', N'LOW', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2020-03-10T20:15:00.000' AS DateTime), CAST(N'2020-03-16T19:37:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-10', N'CWE-400', N'CVE-2019-13925', N'3', N'A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0), SCALANCE S612 (All versions >= V3.0), SCALANCE S623 (All versions >= V3.0), SCALANCE S627-2M (All versions >= V3.0). Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-02-11T16:15:00.000' AS DateTime), CAST(N'2020-02-19T20:15:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-10', N'CWE-400', N'CVE-2019-13926', N'3', N'A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0), SCALANCE S612 (All versions >= V3.0), SCALANCE S623 (All versions >= V3.0), SCALANCE S627-2M (All versions >= V3.0). Specially crafted packets sent to port 443/tcp of affected devices could cause a Denial-of-Service condition of the web server. A cold reboot is required to restore the functionality of the device.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-02-11T16:15:00.000' AS DateTime), CAST(N'2020-02-19T20:15:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-11', N'CWE-400', N'CVE-2019-19281', N'3', N'A vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions >= V2.5 and < V20.8), SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions >= V2.5 and < V2.8), SIMATIC S7-1500 Software Controller (All versions >= V2.5 and < V20.8). Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a Denial-of-Service condition. The vulnerability can be triggered if specially crafted UDP packets are sent to the device. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no system privileges and no user interaction. An attacker could use the vulnerability to compromise the device availability.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-400', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-03-10T20:15:00.000' AS DateTime), CAST(N'2020-03-13T19:55:00.000' AS DateTime), N'CWE-985', N'Resource Management', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-12', N'CWE-20', N'CVE-2019-19279', N'3', N'A vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100 Ethernet communication modules (All versions). Specially crafted packets sent to port 50000/UDP of the EN100 Ethernet communication modules could cause a Denial-of-Service of the affected device. A manual reboot is required to recover the service of the device. At the time of advisory publication no public exploitation of this security vulnerability was known to Siemens.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-20', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-03-10T20:15:00.000' AS DateTime), CAST(N'2020-03-13T19:49:00.000' AS DateTime), N'CWE-994', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-13', N'CWE-434', N'CVE-2020-6975', N'3', N'Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful exploitation of this vulnerability could allow an attacker to upload a malicious file to the application.', 4.9, 3.6, 1.2, N'MEDIUM', N'CWE-434', N'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N', N'NETWORK', N'LOW', N'NONE', N'HIGH', N'NONE', N'0', N'0', N'0', N'NONE', N'HIGH', CAST(N'2020-02-12T23:15:00.000' AS DateTime), CAST(N'2020-02-21T20:57:00.000' AS DateTime), NULL, N'Tainted Input', N'Web', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-042-13', N'CWE-79', N'CVE-2020-6973', N'3', N'Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cross-site scripting vulnerabilities exist that could allow an attacker to cause a denial-of-service condition.', 6.2, 4, 1.7, N'MEDIUM', N'CWE-79', N'CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'REQUIRED', N'HIGH', CAST(N'2020-02-13T00:15:00.000' AS DateTime), CAST(N'2020-02-21T18:16:00.000' AS DateTime), N'CWE-990', N'Tainted Input', N'Denial of Service', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-044-01', N'CWE-754', N'CVE-2019-6813', N'3', N'A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) and Modicon M340 controller (all firmware versions), which could cause denial of service when truncated SNMP packets on port 161/UDP are received by the device.', 7.5, 3.6, 3.9, N'HIGH', N'CWE-754', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-09-17T20:15:00.000' AS DateTime), CAST(N'2019-10-02T13:15:00.000' AS DateTime), N'CWE-962', N'Exception Management', N'Denial of Service', N'Improper Check for Unusual Conditions')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-044-01', N'CWE-754', N'CVE-2019-6831', N'3', N'A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause disconnection of active connections when an unusually high number of IEC 60870- 5-104 packets are received by the module on port 2404/TCP.', 8.6, 4, 3.9, N'HIGH', N'CWE-754', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2019-09-17T20:15:00.000' AS DateTime), CAST(N'2019-10-02T13:15:00.000' AS DateTime), N'CWE-962', N'Exception Management', N'Denial of Service', N'Improper Check for Unusual Conditions')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-044-01', N'CWE-284', N'CVE-2019-6810', N'3', N'CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions), which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol.', 8.8, 5.9, 2.8, N'HIGH', N'CWE-863', N'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'LOW', CAST(N'2019-09-17T20:15:00.000' AS DateTime), CAST(N'2019-10-02T13:15:00.000' AS DateTime), N'CWE-944', N'Access Control', N'Access Control', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-044-02', N'CWE-754', N'CVE-2019-6833', N'3', N'A CWE-754 � Improper Check for Unusual or Exceptional Conditions vulnerability exists in Magelis HMI Panels (all versions of - HMIGTO, HMISTO, XBTGH, HMIGTU, HMIGTUX, HMISCU, HMISTU, XBTGT, XBTGT, HMIGXO, HMIGXU), which could cause a temporary freeze of the HMI when a high rate of frames is received. When the attack stops, the buffered commands are processed by the HMI panel.', 6.5, 3.6, 2.8, N'MEDIUM', N'CWE-754', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H', N'NETWORK', N'LOW', N'HIGH', N'NONE', N'NONE', N'0', N'0', N'0', N'REQUIRED', N'NONE', CAST(N'2019-09-17T20:15:00.000' AS DateTime), CAST(N'2020-02-10T21:53:00.000' AS DateTime), N'CWE-962', N'Exception Management', N'Memory', N'Unchanged')
  GO
  INSERT [dbo].[validation_icsa_statistics_paper_dev] ([icsa_id], [cwe_id], [cve_id], [cvss_version], [cve_description], [cvss_base_score], [cvss_impact_score], [cvss_exploitability_score], [cvss_severity], [nvd_cwe_id], [cvss_vector], [accessVector], [complexity], [availabilityImpact], [integrityImpact], [confidentialityImpact], [allPriv], [userPriv], [otherPriv], [userInteractionRequired], [privilegesRequired], [u_sys_created], [u_sys_updated], [u_sfp_cluster], [u_old_cat], [u_new_cat], [u_other_cat]) VALUES (N'ICSA-20-049-02', N'CWE-122', N'CVE-2020-6970', N'3', N'A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.3, where a specially crafted script could execute code on the OpenEnterprise Server.', 9.8, 5.9, 3.9, N'CRITICAL', N'CWE-787', N'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H', N'NETWORK', N'LOW', N'HIGH', N'HIGH', N'HIGH', N'0', N'0', N'0', N'NONE', N'NONE', CAST(N'2020-02-19T21:15:00.000' AS DateTime), CAST(N'2020-02-28T18:54:00.000' AS DateTime), N'CWE-970', N'Memory', N'Memory', N'Unchanged')
  GO
  