VAR-201403-0320
Vulnerability from variot - Updated: 2023-12-18 12:21Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets. Supplementary information : CWE Vulnerability type by CWE-404: Improper Resource Shutdown or Release ( Improper shutdown and release of resources ) Has been identified. Siemens SIMATIC is an automation software in a single engineering environment. The Siemens SIMATIC S7-1500 failed to properly handle the specially crafted messages sent to the 443/tcp (HTTPS) port, allowing remote attackers to exploit the vulnerability to send specially crafted requests to put the device into defect mode and to restart the normal function. Siemens SIMATIC S7-1500 is prone to a denial-of-service vulnerability. Remote attackers may exploit this issue to cause denial-of-service conditions, denying service to legitimate users. Versions prior to SIMATIC S7-1500 1.5.0 are vulnerable
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201403-0320",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "simatic s7-1500 cpu",
"scope": "eq",
"trust": 1.6,
"vendor": "siemens",
"version": "1.0.1"
},
{
"model": "simatic s7-1500 cpu",
"scope": "eq",
"trust": 1.6,
"vendor": "siemens",
"version": "1.1.0"
},
{
"model": "simatic s7-1500 cpu",
"scope": "eq",
"trust": 1.6,
"vendor": "siemens",
"version": "1.1.1"
},
{
"model": "simatic s7-1500 cpu",
"scope": "lte",
"trust": 1.0,
"vendor": "siemens",
"version": "1.1.2"
},
{
"model": "simatic s7-1500 cpu",
"scope": "lt",
"trust": 0.8,
"vendor": "siemens",
"version": "1.5.0"
},
{
"model": "simatic s7-1500",
"scope": "eq",
"trust": 0.6,
"vendor": "siemens",
"version": "1.x"
},
{
"model": "simatic s7-1500 cpu",
"scope": "eq",
"trust": 0.6,
"vendor": "siemens",
"version": "1.1.2"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "simatic s7 1500 cpu",
"version": "1.0.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "simatic s7 1500 cpu",
"version": "1.1.0"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "simatic s7 1500 cpu",
"version": "1.1.1"
},
{
"model": null,
"scope": "eq",
"trust": 0.4,
"vendor": "simatic s7 1500 cpu",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd"
},
{
"db": "CNVD",
"id": "CNVD-2014-01716"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001714"
},
{
"db": "NVD",
"id": "CVE-2014-2259"
},
{
"db": "CNNVD",
"id": "CNNVD-201403-331"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "1.1.2",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.1.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.1.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:siemens:simatic_s7-1500_cpu_firmware:1.0.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2014-2259"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The vendor reported this issue.",
"sources": [
{
"db": "BID",
"id": "66191"
}
],
"trust": 0.3
},
"cve": "CVE-2014-2259",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 7.8,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2014-2259",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CNVD-2014-01716",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-70198",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2014-2259",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2014-01716",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201403-331",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "IVD",
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd",
"trust": 0.2,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-70198",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd"
},
{
"db": "CNVD",
"id": "CNVD-2014-01716"
},
{
"db": "VULHUB",
"id": "VHN-70198"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001714"
},
{
"db": "NVD",
"id": "CVE-2014-2259"
},
{
"db": "CNNVD",
"id": "CNNVD-201403-331"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Siemens SIMATIC S7-1500 CPU PLC devices with firmware before 1.5.0 allow remote attackers to cause a denial of service (defect-mode transition) via crafted HTTPS packets. Supplementary information : CWE Vulnerability type by CWE-404: Improper Resource Shutdown or Release ( Improper shutdown and release of resources ) Has been identified. Siemens SIMATIC is an automation software in a single engineering environment. The Siemens SIMATIC S7-1500 failed to properly handle the specially crafted messages sent to the 443/tcp (HTTPS) port, allowing remote attackers to exploit the vulnerability to send specially crafted requests to put the device into defect mode and to restart the normal function. Siemens SIMATIC S7-1500 is prone to a denial-of-service vulnerability. \nRemote attackers may exploit this issue to cause denial-of-service conditions, denying service to legitimate users. \nVersions prior to SIMATIC S7-1500 1.5.0 are vulnerable",
"sources": [
{
"db": "NVD",
"id": "CVE-2014-2259"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001714"
},
{
"db": "CNVD",
"id": "CNVD-2014-01716"
},
{
"db": "BID",
"id": "66191"
},
{
"db": "IVD",
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd"
},
{
"db": "VULHUB",
"id": "VHN-70198"
}
],
"trust": 2.88
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2014-2259",
"trust": 3.8
},
{
"db": "ICS CERT",
"id": "ICSA-14-073-01",
"trust": 2.5
},
{
"db": "SIEMENS",
"id": "SSA-456423",
"trust": 2.3
},
{
"db": "CNNVD",
"id": "CNNVD-201403-331",
"trust": 1.1
},
{
"db": "CNVD",
"id": "CNVD-2014-01716",
"trust": 1.0
},
{
"db": "BID",
"id": "66191",
"trust": 1.0
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001714",
"trust": 0.8
},
{
"db": "IVD",
"id": "25EB47CC-2352-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "IVD",
"id": "8EA81B90-71D0-4A98-A618-BEDEC27F45BD",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-70198",
"trust": 0.1
}
],
"sources": [
{
"db": "IVD",
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd"
},
{
"db": "CNVD",
"id": "CNVD-2014-01716"
},
{
"db": "VULHUB",
"id": "VHN-70198"
},
{
"db": "BID",
"id": "66191"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001714"
},
{
"db": "NVD",
"id": "CVE-2014-2259"
},
{
"db": "CNNVD",
"id": "CNNVD-201403-331"
}
]
},
"id": "VAR-201403-0320",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd"
},
{
"db": "CNVD",
"id": "CNVD-2014-01716"
},
{
"db": "VULHUB",
"id": "VHN-70198"
}
],
"trust": 1.68274233
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 1.0
}
],
"sources": [
{
"db": "IVD",
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd"
},
{
"db": "CNVD",
"id": "CNVD-2014-01716"
}
]
},
"last_update_date": "2023-12-18T12:21:24.453000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SSA-456423",
"trust": 0.8,
"url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf"
},
{
"title": "Patch for Siemens SIMATIC S7-1500 Denial of Service Vulnerability (CNVD-2014-01716)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/44298"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-01716"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001714"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
},
{
"problemtype": "CWE-Other",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-001714"
},
{
"db": "NVD",
"id": "CVE-2014-2259"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://ics-cert.us-cert.gov/advisories/icsa-14-073-01"
},
{
"trust": 2.3,
"url": "http://www.siemens.com/innovation/pool/de/forschungsfelder/siemens_security_advisory_ssa-456423.pdf"
},
{
"trust": 1.7,
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-456423.pdf"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-2259"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-2259"
},
{
"trust": 0.3,
"url": "http://subscriber.communications.siemens.com/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-01716"
},
{
"db": "VULHUB",
"id": "VHN-70198"
},
{
"db": "BID",
"id": "66191"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001714"
},
{
"db": "NVD",
"id": "CVE-2014-2259"
},
{
"db": "CNNVD",
"id": "CNNVD-201403-331"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd"
},
{
"db": "CNVD",
"id": "CNVD-2014-01716"
},
{
"db": "VULHUB",
"id": "VHN-70198"
},
{
"db": "BID",
"id": "66191"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001714"
},
{
"db": "NVD",
"id": "CVE-2014-2259"
},
{
"db": "CNNVD",
"id": "CNNVD-201403-331"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-03-17T00:00:00",
"db": "IVD",
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d"
},
{
"date": "2014-03-17T00:00:00",
"db": "IVD",
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd"
},
{
"date": "2014-03-17T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-01716"
},
{
"date": "2014-03-16T00:00:00",
"db": "VULHUB",
"id": "VHN-70198"
},
{
"date": "2014-03-13T00:00:00",
"db": "BID",
"id": "66191"
},
{
"date": "2014-03-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-001714"
},
{
"date": "2014-03-16T14:06:45.960000",
"db": "NVD",
"id": "CVE-2014-2259"
},
{
"date": "2014-03-19T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201403-331"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-03-17T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-01716"
},
{
"date": "2020-02-10T00:00:00",
"db": "VULHUB",
"id": "VHN-70198"
},
{
"date": "2014-03-19T01:13:00",
"db": "BID",
"id": "66191"
},
{
"date": "2014-03-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-001714"
},
{
"date": "2020-02-10T15:15:17.183000",
"db": "NVD",
"id": "CVE-2014-2259"
},
{
"date": "2020-02-11T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201403-331"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201403-331"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Siemens SIMATIC S7-1500 CPU PLC Service disruption in device firmware (DoS) Vulnerabilities",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-001714"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "IVD",
"id": "25eb47cc-2352-11e6-abef-000c29c66e3d"
},
{
"db": "IVD",
"id": "8ea81b90-71d0-4a98-a618-bedec27f45bd"
},
{
"db": "CNNVD",
"id": "CNNVD-201403-331"
}
],
"trust": 1.0
}
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.