Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2019-12365 | The Newton application through 10.0.23 for Android allows XSS via an event attribute and arbitrary file loading via a s… | Medium (6.1) | 2020-03-18 | Environment Specific |
| CVE-2019-12132 | An issue was discovered in ONAP SDNC before Dublin. By executing sla/dgUpload with a crafted filename parameter, an una… | Critical (9.8) | 2020-03-18 | Environment Specific |
| CVE-2019-12131 | An issue was detected in ONAP APPC through Dublin and SDC through Dublin. By setting a USER_ID parameter in an HTTP hea… | Critical (9.1) | 2020-03-18 | Environment Specific |
| CVE-2019-12124 | An issue was discovered in ONAP APPC before Dublin. By using an exposed unprotected Jolokia interface, an unauthenticat… | Critical (9.1) | 2020-03-18 | Environment Specific |
| CVE-2019-12123 | An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsXml with a crafted module parameter, an aut… | High (8.8) | 2020-03-18 | Environment Specific |