Search

Find a vulnerability

Search criteria

    109 vulnerabilities by FreeRadius

    CERTFR-2026-AVI-0688

    Vulnerability from certfr_avis - Published: 2026-06-04 - Updated: 2026-06-04

    De multiples vulnérabilités ont été découvertes dans FreeRadius. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un problème de sécurité non spécifié par l'éditeur.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    FreeRadius FreeRADIUS FreeRadius versions 3.2.x antérieures à 3.2.9
    FreeRadius FreeRADIUS FreeRadius versions antérieures à 3.0.28
    References
    Bulletin de sécurité FreeRadius security 2026-06-01 vendor-advisory

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "FreeRadius versions 3.2.x ant\u00e9rieures \u00e0 3.2.9",
      "product": {
        "name": "FreeRADIUS",
        "vendor": {
          "name": "FreeRadius",
          "scada": false
        }
      }
    },
    {
      "description": "FreeRadius versions ant\u00e9rieures \u00e0 3.0.28",
      "product": {
        "name": "FreeRADIUS",
        "vendor": {
          "name": "FreeRadius",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [],
  "initial_release_date": "2026-06-04T00:00:00",
  "last_revision_date": "2026-06-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0688",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans FreeRadius. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans FreeRadius",
  "vendor_advisories": [
    {
      "published_at": "2026-06-01",
      "title": "Bulletin de s\u00e9curit\u00e9 FreeRadius security",
      "url": "https://freeradius.org/security/"
    }
  ]
}

    CERTFR-2024-AVI-0550

    Vulnerability from certfr_avis - Published: 2024-07-09 - Updated: 2024-07-09

    Une vulnérabilité a été découverte dans le protocole RADIUS. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    FreeRadius FreeRADIUS FreeRadius versions 3.2.x antérieures à 3.2.5 FreeRadius versions antérieures à 3.0.27
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "FreeRadius versions 3.2.x ant\u00e9rieures \u00e0 3.2.5\nFreeRadius versions ant\u00e9rieures \u00e0 3.0.27",
      "product": {
        "name": "FreeRADIUS",
        "vendor": {
          "name": "FreeRadius",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2024-3596",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-3596"
    }
  ],
  "initial_release_date": "2024-07-09T00:00:00",
  "last_revision_date": "2024-07-09T00:00:00",
  "links": [
    {
      "title": "Avis de s\u00e9curit\u00e9 CERT Carnegie Mellon University VU#456537 du 09 juillet 2024",
      "url": "https://kb.cert.org/vuls/id/456537"
    }
  ],
  "reference": "CERTFR-2024-AVI-0550",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-07-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans le protocole RADIUS. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Vuln\u00e9rabilit\u00e9 dans le protocole RADIUS",
  "vendor_advisories": [
    {
      "published_at": "2024-07-08",
      "title": "Bulletin de s\u00e9curit\u00e9 FreeRadius",
      "url": "https://www.freeradius.org/security/"
    }
  ]
}

    CERTFR-2024-AVI-0494

    Vulnerability from certfr_avis - Published: 2024-06-14 - Updated: 2024-06-21

    Une vulnérabilité a été découverte dans FreeRADIUS. Elle permet à un attaquant de provoquer une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    FreeRadius FreeRADIUS FreeRADIUS versions antérieures à 3.2
    References
    Bulletin de sécurité FreeRadius security 2024-05-21 vendor-advisory

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "FreeRADIUS versions ant\u00e9rieures \u00e0 3.2",
      "product": {
        "name": "FreeRADIUS",
        "vendor": {
          "name": "FreeRadius",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [],
  "initial_release_date": "2024-06-14T00:00:00",
  "last_revision_date": "2024-06-21T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0494",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-06-14T00:00:00.000000"
    },
    {
      "description": "L\u0027\u00e9diteur \u00e0 retir\u00e9 son bulletin de s\u00e9curit\u00e9",
      "revision_date": "2024-06-17T00:00:00.000000"
    },
    {
      "description": "L\u0027\u00e9diteur a compl\u00e9tement supprim\u00e9 son avis",
      "revision_date": "2024-06-21T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans FreeRADIUS. Elle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Vuln\u00e9rabilit\u00e9 dans FreeRADIUS",
  "vendor_advisories": [
    {
      "published_at": "2024-05-21",
      "title": "Bulletin de s\u00e9curit\u00e9 FreeRadius security",
      "url": "https://freeradius.org/security/"
    }
  ]
}

    CERTFR-2022-AVI-384

    Vulnerability from certfr_avis - Published: 2022-04-25 - Updated: 2022-04-25

    De multiples vulnérabilités ont été découvertes dans FreeRADIUS Server. Elles permettent à un attaquant de provoquer un déni de service à distance et une atteinte à la confidentialité des données.

    Solution

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    None
    Impacted products
    Vendor Product Description
    FreeRadius FreeRADIUS FreeRADIUS versions 0.0.1 à 3.0.25
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "FreeRADIUS versions 0.0.1 \u00e0 3.0.25",
      "product": {
        "name": "FreeRADIUS",
        "vendor": {
          "name": "FreeRadius",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2022-04-25T00:00:00",
  "last_revision_date": "2022-04-25T00:00:00",
  "links": [],
  "reference": "CERTFR-2022-AVI-384",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-04-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans FreeRADIUS Server.\nElles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0\ndistance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans FreeRADIUS Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 FreeRADIUS du 22 avril 2022",
      "url": "https://freeradius.org/security/"
    }
  ]
}

    VAR-201904-0381

    Vulnerability from variot - Updated: 2024-11-23 21:12

    The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. WPA3 Protocol and hostapd When wpa_supplicant There are multiple vulnerabilities in the implementation of, and a remote attacker can obtain weak password information and privileges, as well as disrupt service operations. (DoS) An attack may be carried out. These vulnerabilities "Dragonblood" It is called. CERT/CC Then continue WPA3 The protocol is being verified. Discovered this time WPA3 Vulnerabilities related to the implementation of can be attributed to the protocol specification itself. WPA3 Is a key exchange protocol, Simultaneous Authentication of Equals (SAE) Is adopted. this is "Dragonfly Key Exchange" It is also called WPA2 In Pre-Shared Key (PSK) Acts as a protocol replacement. hostapd Is WPA3 Access point and authentication server daemon is. Also, wpa_supplicant Is WPA authenticator ( access point ) Implemented key exchange with supplicant ( client ) And WPA3 Is supported. hostapd When wpa_supplicant Both Extensible Authentication Protocol Password (EAP-PWD) When SAE Has the following vulnerabilities: Elliptic curve crypto group (ECC groups) Against SAE Cache-based attacks (SAE Side channel attack ) (CWE-208, CWE-524) - CVE-2019-9494 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to observable timing differences and cache access patterns. Elliptic curve crypto group (ECC groups) Against EAP-PWD Cache-based attack (EAP-PWD Side channel attack ) (CWE-524) - CVE-2019-9495 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to cache access patterns. SAE confirm Message validation is not performed during processing (CWE-642) - CVE-2019-9496 hostapd Process hostapd/AP When operating in mode SAE confirm Incomplete verification of message processing due to incorrect authentication sequence hostapd The process may end. EAP-PWD Peer In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9499 wpa_supplicant (EAP Peer) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated. A side-channel attack captures information that can be used to recover passwords - CVE-2019-9494 * A weak password is obtained by a dictionary attack - CVE-2019-9495 This attack requires the authority to install and execute applications. Memory access pattern analysis is possible by observing the shared cache. hostapd/wpa_supplicant 2.7 And later versions CVE-2019-9494 Is not affected by the timing attack hostapd Process can be terminated ( Service operation interruption ) - CVE-2019-9496 *EAP-PWD Authentication is bypassed - CVE-2019-9497 Crypto library EC point If a verification process is implemented for an attacker, an attacker cannot acquire or exchange a session key * Illegal scalar / Session key is obtained using message with element value and authentication is bypassed - CVE-2019-9498, CVE-2019-9499. WPA is prone to multiple security weaknesses. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. A vulnerability in the EAP-pwd implementation of hostapd (EAP server) could allow an unauthenticated, adjacent malicious user to gain access to a targeted network.

    The vendor has confirmed the vulnerability and released software updates. ========================================================================== Ubuntu Security Notice USN-3944-1 April 10, 2019

    wpa vulnerabilities

    A security issue affects these releases of Ubuntu and its derivatives:

    • Ubuntu 18.10
    • Ubuntu 18.04 LTS
    • Ubuntu 16.04 LTS
    • Ubuntu 14.04 LTS

    Summary:

    Several security issues were fixed in wpa_supplicant and hostapd.

    Software Description: - wpa: client support for WPA and WPA2

    Details:

    It was discovered that wpa_supplicant and hostapd were vulnerable to a side channel attack against EAP-pwd. A remote attacker could possibly use this issue to recover certain passwords. A remote attacker could possibly use this issue to perform a reflection attack and authenticate without the appropriate password. (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499)

    It was discovered that hostapd incorrectly handled obtaining random numbers. In rare cases where the urandom device isn't available, it would fall back to using a low-quality PRNG. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10743)

    Update instructions:

    The problem can be corrected by updating your system to the following package versions:

    Ubuntu 18.10: hostapd 2:2.6-18ubuntu1.1 wpasupplicant 2:2.6-18ubuntu1.1

    Ubuntu 18.04 LTS: hostapd 2:2.6-15ubuntu2.2 wpasupplicant 2:2.6-15ubuntu2.2

    Ubuntu 16.04 LTS: hostapd 2.4-0ubuntu6.4 wpasupplicant 2.4-0ubuntu6.4

    Ubuntu 14.04 LTS: hostapd 2.1-0ubuntu1.7 wpasupplicant 2.1-0ubuntu1.7

    After a standard system update you need to reboot your computer to make all the necessary changes.

    References: https://usn.ubuntu.com/usn/usn-3944-1 CVE-2016-10743, CVE-2019-9495, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499

    Package Information: https://launchpad.net/ubuntu/+source/wpa/2:2.6-18ubuntu1.1 https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.2 https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.4 https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.7 . These vulnerability are also collectively known as "Dragonblood".

    CVE-2019-9495

    Cache-based side-channel attack against the EAP-pwd implementation: an
attacker able to run unprivileged code on the target machine (including for
example javascript code in a browser on a smartphone) during the handshake
could deduce enough information to discover the password in a dictionary
attack.

    CVE-2019-9498

    EAP-pwd server missing commit validation for scalar/element: hostapd
doesn't validate values received in the EAP-pwd-Commit message, so an
attacker could use a specially crafted commit message to manipulate the
exchange in order for hostapd to derive a session key from a limited set of
possible values.

    CVE-2019-9499

    EAP-pwd peer missing commit validation for scalar/element: wpa_supplicant
doesn't validate values received in the EAP-pwd-Commit message, so an
attacker could use a specially crafted commit message to manipulate the
exchange in order for wpa_supplicant to derive a session key from a limited
set of possible values. This could result in an attacker being able to
complete authentication and operate as a rogue AP.

    Note that the Dragonblood moniker also applies to CVE-2019-9494 and CVE-2014-9496 which are vulnerabilities in the SAE protocol in WPA3. SAE is not enabled in Debian stretch builds of wpa, which is thus not vulnerable by default.

    Due to the complexity of the backporting process, the fix for these vulnerabilities are partial. Users are advised to use strong passwords to prevent dictionary attacks or use a 2.7-based version from stretch-backports (version above 2:2.7+git20190128+0c1e29f-4).

    For the stable distribution (stretch), these problems have been fixed in version 2:2.4-1+deb9u3.

    We recommend that you upgrade your wpa packages.

    For the detailed security status of wpa please refer to its security tracker page at: https://security-tracker.debian.org/tracker/wpa

    Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlyu2lQACgkQ3rYcyPpX RFtamggAlq8telLPhKzD1+Ns+Pci+Y+WkOAmUpn4XQ0TOmG18sDU1iS2xNHF+buA lXVKLp7zgE4VFJsclHAJXtp8anyo7YU99NzUcSF6vboRm3msifL4eE3S7IS9fAaH 0WWCHwlHMf9IGHqBn9mkwiYySwlId8ps3lvoVV2EOB4wJqa4Y6d4YrqPyFzWop56 jKTlTcJqvQBUFo/y9In/sx8QgONhNwnNAKcrBfiVwn8QHuMRA4c4UJz+NN38ctyt djA/zqT/uXwWhr8Mfl7J+rfdsC5TFPl45qr/gbmB7GRlU2la0dGJv/l0afbINrrG NoAgpOeMrwijIdDJ9vG6O3YVV6bIkg==OkO5 -----END PGP SIGNATURE----- . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

    ============================================================================= FreeBSD-SA-19:03.wpa Security Advisory The FreeBSD Project

    Topic: Multiple vulnerabilities in hostapd and wpa_supplicant

    Category: contrib Module: wpa Announced: 2019-05-14 Affects: All supported versions of FreeBSD. Corrected: 2019-05-01 01:42:38 UTC (stable/12, 12.0-STABLE) 2019-05-14 22:57:29 UTC (releng/12.0, 12.0-RELEASE-p4) 2019-05-01 01:43:17 UTC (stable/11, 11.2-STABLE) 2019-05-14 22:59:32 UTC (releng/11.2, 11.2-RELEASE-p10) CVE Name: CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, CVE-2019-11555

    For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit .

    I. Background

    Wi-Fi Protected Access II (WPA2) is a security protocol developed by the Wi-Fi Alliance to secure wireless computer networks.

    hostapd(8) and wpa_supplicant(8) are implementations of user space daemon for access points and wireless client that implements the WPA2 protocol.

    II. Problem Description

    Multiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8) implementations. For more details, please see the reference URLs in the References section below.

    III. Impact

    Security of the wireless network may be compromised. For more details, please see the reference URLS in the References section below.

    IV. Workaround

    No workaround is available, but systems not using hostapd(8) or wpa_supplicant(8) are not affected.

    V. Solution

    Perform one of the following:

    1) Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date.

    Afterwards, restart hostapd(8) or wpa_supplicant(8).

    2) To update your vulnerable system via a binary patch:

    Systems running a RELEASE version of FreeBSD on the i386 or amd64 platforms can be updated via the freebsd-update(8) utility:

    freebsd-update fetch

    freebsd-update install

    Afterwards, restart hostapd(8) or wpa_supplicant(8).

    3) To update your vulnerable system via a source code patch:

    The following patches have been verified to apply to the applicable FreeBSD release branches.

    a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility.

    [FreeBSD 12.0]

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch.asc

    gpg --verify wpa-12.patch.asc

    [FreeBSD 11.2]

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch.asc

    gpg --verify wpa-11.patch.asc

    b) Apply the patch. Execute the following commands as root:

    cd /usr/src

    patch < /path/to/patch

    c) Recompile the operating system using buildworld and installworld as described in .

    Restart the applicable daemons, or reboot the system.

    VI. Correction details

    The following list contains the correction revision numbers for each affected branch.

    Branch/path Revision

    stable/12/ r346980 releng/12.0/ r347587 stable/11/ r346981 releng/11.2/ r347588

    To see which files were modified by a particular revision, run the following command, replacing NNNNNN with the revision number, on a machine with Subversion installed:

    svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

    Or visit the following URL, replacing NNNNNN with the revision number:

    VII. References

    The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlzbTrVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n 5cLsaA/9EB577JYdYdwFCOQ6TiOVhyluLJzgrhG3aiXeBntj8ytkRjcXKnP0aega 3G2R1do7pixVYUF52OWJwaNO3Hm+LHMngiOqujcLI+49ISI3T/APaU/D2dqmXVb8 nN/Pd+0HDGj3R3MwyyHT8/3fX0pJ395vcQhYb61M6PUSrwr8uiBbILT57iCadZoL F4KOCvRv7I4EFWXvqngGfeohZbbeHPBga2DwuebWR/E/1uWrMKEOF2pvh4b6ZSN2 pdr7ZHMiL1cZt+p+2gwWoqDWyD93u2lTC7Gmo3Vom+meH7eaQ79obXEN541aiQ04 CYhjkwuW5uNGUWCO/Xsfn5gqICeB1G5A/aBHQlAyVgUGia8jukL1jn3ga4AQgKrN h9aTmvrQs17PjMVtq81ZS0xm0ztW0Y6t2A9fRgGcnOOw+uy5tHMbJaKSMy8x97NT gUyXtoyu47tjjMrzsQcma2t6/+iCEDuW1P1LybSmv/v59gro9uveCdl0busgM9GS M5bpWK/qYQS1HYmYeTKMRynmD8ntRbflYoUP/SpijHsz+56rgyeJO12WyltyT32f j5fgnKaznW/UPtgmK0wnPIG9XEj3Nzs4C4cypO5t8OiuLEli4wRdb6MYlvEjq4la R3lnCzmTd9sg+K6cod2qWWSYdsdEwizcpQDp7M9lRqomiANLqJ4= =MXma -----END PGP SIGNATURE-----

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201904-0381",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "freebsd",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "11.0"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "30"
      },
      {
        "model": "backports sle",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.0"
      },
      {
        "model": "router manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "1.2"
      },
      {
        "model": "radius server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "3.0"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "11.2"
      },
      {
        "model": "wpa supplicant",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.5"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "28"
      },
      {
        "model": "hostapd",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.7"
      },
      {
        "model": "hostapd",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.4"
      },
      {
        "model": "wpa supplicant",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.7"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "12.0"
      },
      {
        "model": "hostapd",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.5"
      },
      {
        "model": "wpa supplicant",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.4"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "29"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "8.0"
      },
      {
        "model": "freebsd",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "11.1"
      },
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.1"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "broadcom",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "freeradius",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "",
        "scope": null,
        "trust": 0.8,
        "vendor": "multiple vendors",
        "version": null
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 fi",
        "version": "0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 fi",
        "version": "0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "18.10"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "18.04"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "16.04"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "14.04"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9498"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:misc:multiple_vendors",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Debian",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-585"
      }
    ],
    "trust": 0.7
  },
  "cve": "CVE-2019-9498",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2019-9498",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.1,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Medium",
            "accessVector": "Adjacent Network",
            "authentication": "Single",
            "author": "JPCERT/CC",
            "availabilityImpact": "Partial",
            "baseScore": 7.0,
            "confidentialityImpact": "Complete",
            "exploitabilityScore": null,
            "id": "JVNDB-2019-002625",
            "impactScore": null,
            "integrityImpact": "Complete",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "VHN-160933",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.2,
            "id": "CVE-2019-9498",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "High",
            "attackVector": "Adjacent Network",
            "author": "JPCERT/CC",
            "availabilityImpact": "Low",
            "baseScore": 6.7,
            "baseSeverity": "Medium",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "JVNDB-2019-002625",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2019-9498",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "JPCERT/CC",
            "id": "JVNDB-2019-002625",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201904-585",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-160933",
            "trust": 0.1,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2019-9498",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160933"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9498"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-585"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9498"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The implementations of EAP-PWD in hostapd EAP Server, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may be able to use invalid scalar/element values to complete authentication, gaining session key and network access without needing or learning the password. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. WPA3 Protocol and hostapd When wpa_supplicant There are multiple vulnerabilities in the implementation of, and a remote attacker can obtain weak password information and privileges, as well as disrupt service operations. (DoS) An attack may be carried out. These vulnerabilities \"Dragonblood\" It is called. CERT/CC Then continue WPA3 The protocol is being verified. Discovered this time WPA3 Vulnerabilities related to the implementation of can be attributed to the protocol specification itself. WPA3 Is a key exchange protocol, Simultaneous Authentication of Equals (SAE) Is adopted. this is \"Dragonfly Key Exchange\" It is also called WPA2 In Pre-Shared Key (PSK) Acts as a protocol replacement. hostapd Is WPA3 Access point and authentication server daemon is. Also, wpa_supplicant Is WPA authenticator ( access point ) Implemented key exchange with supplicant ( client ) And WPA3 Is supported. hostapd When wpa_supplicant Both Extensible Authentication Protocol Password (EAP-PWD) When SAE Has the following vulnerabilities: Elliptic curve crypto group (ECC groups) Against SAE Cache-based attacks (SAE Side channel attack ) (CWE-208, CWE-524) - CVE-2019-9494 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to observable timing differences and cache access patterns. Elliptic curve crypto group (ECC groups) Against EAP-PWD Cache-based attack (EAP-PWD Side channel attack ) (CWE-524) - CVE-2019-9495 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to cache access patterns. SAE confirm Message validation is not performed during processing (CWE-642) - CVE-2019-9496 hostapd Process hostapd/AP When operating in mode SAE confirm Incomplete verification of message processing due to incorrect authentication sequence hostapd The process may end. EAP-PWD Peer In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9499 wpa_supplicant (EAP Peer) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated.* A side-channel attack captures information that can be used to recover passwords - CVE-2019-9494 * A weak password is obtained by a dictionary attack - CVE-2019-9495 This attack requires the authority to install and execute applications. Memory access pattern analysis is possible by observing the shared cache. hostapd/wpa_supplicant 2.7 And later versions CVE-2019-9494 Is not affected by the timing attack *hostapd Process can be terminated ( Service operation interruption ) - CVE-2019-9496 *EAP-PWD Authentication is bypassed - CVE-2019-9497 Crypto library EC point If a verification process is implemented for an attacker, an attacker cannot acquire or exchange a session key * Illegal scalar / Session key is obtained using message with element value and authentication is bypassed - CVE-2019-9498, CVE-2019-9499. WPA is prone to multiple security weaknesses. \nAttackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. A vulnerability in the EAP-pwd implementation of hostapd (EAP server) could allow an unauthenticated, adjacent malicious user to gain access to a targeted network. \n\nThe vendor has confirmed the vulnerability and released software updates. ==========================================================================\nUbuntu Security Notice USN-3944-1\nApril 10, 2019\n\nwpa vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 18.10\n- Ubuntu 18.04 LTS\n- Ubuntu 16.04 LTS\n- Ubuntu 14.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in wpa_supplicant and hostapd. \n\nSoftware Description:\n- wpa: client support for WPA and WPA2\n\nDetails:\n\nIt was discovered that wpa_supplicant and hostapd were vulnerable to a\nside channel attack against EAP-pwd. A remote attacker could possibly use\nthis issue to recover certain passwords. A\nremote attacker could possibly use this issue to perform a reflection\nattack and authenticate without the appropriate password. (CVE-2019-9497,\nCVE-2019-9498, CVE-2019-9499)\n\nIt was discovered that hostapd incorrectly handled obtaining random\nnumbers. In rare cases where the urandom device isn\u0027t available, it would\nfall back to using a low-quality PRNG. This issue only affected Ubuntu\n14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10743)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 18.10:\n  hostapd                         2:2.6-18ubuntu1.1\n  wpasupplicant                   2:2.6-18ubuntu1.1\n\nUbuntu 18.04 LTS:\n  hostapd                         2:2.6-15ubuntu2.2\n  wpasupplicant                   2:2.6-15ubuntu2.2\n\nUbuntu 16.04 LTS:\n  hostapd                         2.4-0ubuntu6.4\n  wpasupplicant                   2.4-0ubuntu6.4\n\nUbuntu 14.04 LTS:\n  hostapd                         2.1-0ubuntu1.7\n  wpasupplicant                   2.1-0ubuntu1.7\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n\nReferences:\n  https://usn.ubuntu.com/usn/usn-3944-1\n  CVE-2016-10743, CVE-2019-9495, CVE-2019-9497, CVE-2019-9498,\n  CVE-2019-9499\n\nPackage Information:\n  https://launchpad.net/ubuntu/+source/wpa/2:2.6-18ubuntu1.1\n  https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.2\n  https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.4\n  https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.7\n. These vulnerability are also collectively\nknown as \"Dragonblood\". \n\nCVE-2019-9495\n\n    Cache-based side-channel attack against the EAP-pwd implementation: an\n    attacker able to run unprivileged code on the target machine (including for\n    example javascript code in a browser on a smartphone) during the handshake\n    could deduce enough information to discover the password in a dictionary\n    attack. \n\nCVE-2019-9498\n\n    EAP-pwd server missing commit validation for scalar/element: hostapd\n    doesn\u0027t validate values received in the EAP-pwd-Commit message, so an\n    attacker could use a specially crafted commit message to manipulate the\n    exchange in order for hostapd to derive a session key from a limited set of\n    possible values. \n\nCVE-2019-9499\n\n    EAP-pwd peer missing commit validation for scalar/element: wpa_supplicant\n    doesn\u0027t validate values received in the EAP-pwd-Commit message, so an\n    attacker could use a specially crafted commit message to manipulate the\n    exchange in order for wpa_supplicant to derive a session key from a limited\n    set of possible values. This could result in an attacker being able to\n    complete authentication and operate as a rogue AP. \n\nNote that the Dragonblood moniker also applies to CVE-2019-9494 and\nCVE-2014-9496 which are vulnerabilities in the SAE protocol in WPA3. SAE is not\nenabled in Debian stretch builds of wpa, which is thus not vulnerable by default. \n\nDue to the complexity of the backporting process, the fix for these\nvulnerabilities are partial. Users are advised to use strong passwords to\nprevent dictionary attacks or use a 2.7-based version from stretch-backports\n(version above 2:2.7+git20190128+0c1e29f-4). \n\nFor the stable distribution (stretch), these problems have been fixed in\nversion 2:2.4-1+deb9u3. \n\nWe recommend that you upgrade your wpa packages. \n\nFor the detailed security status of wpa please refer to\nits security tracker page at:\nhttps://security-tracker.debian.org/tracker/wpa\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\n\niQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlyu2lQACgkQ3rYcyPpX\nRFtamggAlq8telLPhKzD1+Ns+Pci+Y+WkOAmUpn4XQ0TOmG18sDU1iS2xNHF+buA\nlXVKLp7zgE4VFJsclHAJXtp8anyo7YU99NzUcSF6vboRm3msifL4eE3S7IS9fAaH\n0WWCHwlHMf9IGHqBn9mkwiYySwlId8ps3lvoVV2EOB4wJqa4Y6d4YrqPyFzWop56\njKTlTcJqvQBUFo/y9In/sx8QgONhNwnNAKcrBfiVwn8QHuMRA4c4UJz+NN38ctyt\ndjA/zqT/uXwWhr8Mfl7J+rfdsC5TFPl45qr/gbmB7GRlU2la0dGJv/l0afbINrrG\nNoAgpOeMrwijIdDJ9vG6O3YVV6bIkg==OkO5\n-----END PGP SIGNATURE-----\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n=============================================================================\nFreeBSD-SA-19:03.wpa                                        Security Advisory\n                                                          The FreeBSD Project\n\nTopic:          Multiple vulnerabilities in hostapd and wpa_supplicant\n\nCategory:       contrib\nModule:         wpa\nAnnounced:      2019-05-14\nAffects:        All supported versions of FreeBSD. \nCorrected:      2019-05-01 01:42:38 UTC (stable/12, 12.0-STABLE)\n                2019-05-14 22:57:29 UTC (releng/12.0, 12.0-RELEASE-p4)\n                2019-05-01 01:43:17 UTC (stable/11, 11.2-STABLE)\n                2019-05-14 22:59:32 UTC (releng/11.2, 11.2-RELEASE-p10)\nCVE Name:       CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497,\n                CVE-2019-9498, CVE-2019-9499, CVE-2019-11555\n\nFor general information regarding FreeBSD Security Advisories,\nincluding descriptions of the fields above, security branches, and the\nfollowing sections, please visit \u003cURL:https://security.FreeBSD.org/\u003e. \n\nI.   Background\n\nWi-Fi Protected Access II (WPA2) is a security protocol developed by the\nWi-Fi Alliance to secure wireless computer networks. \n\nhostapd(8) and wpa_supplicant(8) are implementations of user space daemon for\naccess points and wireless client that implements the WPA2 protocol. \n\nII.  Problem Description\n\nMultiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8)\nimplementations.  For more details, please see the reference URLs in the\nReferences section below. \n\nIII. Impact\n\nSecurity of the wireless network may be compromised.  For more details,\nplease see the reference URLS in the References section below. \n\nIV.  Workaround\n\nNo workaround is available, but systems not using hostapd(8) or\nwpa_supplicant(8) are not affected. \n\nV.   Solution\n\nPerform one of the following:\n\n1) Upgrade your vulnerable system to a supported FreeBSD stable or\nrelease / security branch (releng) dated after the correction date. \n\nAfterwards, restart hostapd(8) or wpa_supplicant(8). \n\n2) To update your vulnerable system via a binary patch:\n\nSystems running a RELEASE version of FreeBSD on the i386 or amd64\nplatforms can be updated via the freebsd-update(8) utility:\n\n# freebsd-update fetch\n# freebsd-update install\n\nAfterwards, restart hostapd(8) or wpa_supplicant(8). \n\n3) To update your vulnerable system via a source code patch:\n\nThe following patches have been verified to apply to the applicable\nFreeBSD release branches. \n\na) Download the relevant patch from the location below, and verify the\ndetached PGP signature using your PGP utility. \n\n[FreeBSD 12.0]\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch.asc\n# gpg --verify wpa-12.patch.asc\n\n[FreeBSD 11.2]\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch.asc\n# gpg --verify wpa-11.patch.asc\n\nb) Apply the patch.  Execute the following commands as root:\n\n# cd /usr/src\n# patch \u003c /path/to/patch\n\nc) Recompile the operating system using buildworld and installworld as\ndescribed in \u003cURL:https://www.FreeBSD.org/handbook/makeworld.html\u003e. \n\nRestart the applicable daemons, or reboot the system. \n\nVI.  Correction details\n\nThe following list contains the correction revision numbers for each\naffected branch. \n\nBranch/path                                                      Revision\n- -------------------------------------------------------------------------\nstable/12/                                                        r346980\nreleng/12.0/                                                      r347587\nstable/11/                                                        r346981\nreleng/11.2/                                                      r347588\n- -------------------------------------------------------------------------\n\nTo see which files were modified by a particular revision, run the\nfollowing command, replacing NNNNNN with the revision number, on a\nmachine with Subversion installed:\n\n# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base\n\nOr visit the following URL, replacing NNNNNN with the revision number:\n\n\u003cURL:https://svnweb.freebsd.org/base?view=revision\u0026revision=NNNNNN\u003e\n\nVII. References\n\n\u003cURL:https://w1.fi/security/2019-1\u003e\n\u003cURL:https://w1.fi/security/2019-2\u003e\n\u003cURL:https://w1.fi/security/2019-3\u003e\n\u003cURL:https://w1.fi/security/2019-4\u003e\n\u003cURL:https://w1.fi/security/2019-5\u003e\n\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9494\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9496\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11555\u003e\n\nThe latest revision of this advisory is available at\n\u003cURL:https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc\u003e\n-----BEGIN PGP SIGNATURE-----\n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\nR3lnCzmTd9sg+K6cod2qWWSYdsdEwizcpQDp7M9lRqomiANLqJ4=\n=MXma\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-9498"
      },
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160933"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9498"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      }
    ],
    "trust": 3.06
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-9498",
        "trust": 3.2
      },
      {
        "db": "CERT/CC",
        "id": "VU#871675",
        "trust": 1.7
      },
      {
        "db": "JVN",
        "id": "JVNVU94228755",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-585",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "152481",
        "trust": 0.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.0047",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1258",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.2875",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.4125",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1775",
        "trust": 0.6
      },
      {
        "db": "BID",
        "id": "108401",
        "trust": 0.3
      },
      {
        "db": "VULHUB",
        "id": "VHN-160933",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9498",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152477",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152914",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160933"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9498"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-585"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9498"
      }
    ]
  },
  "id": "VAR-201904-0381",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160933"
      }
    ],
    "trust": 0.725
  },
  "last_update_date": "2024-11-23T21:12:46.004000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "WPA Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=91397"
      },
      {
        "title": "Ubuntu Security Notice: wpa vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=USN-3944-1"
      },
      {
        "title": "Debian CVElist Bug Report Logs: src:wpa: multiples vulnerabilities in SAE and EAP-pwd code in wpa",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=39e042d68cbe59a677ae53b8328d282d"
      },
      {
        "title": "Debian Security Advisories: DSA-4430-1 wpa -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=81a56edb299848e0579a7dd950bd73ba"
      },
      {
        "title": "Brocade Security Advisories: BSA-2019-777",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=brocade_security_advisories\u0026qid=9f89054fc8bab7a9de83cce34e487404"
      },
      {
        "title": "Fortinet Security Advisories: Dragonblood vulnerabilities in WiFi WPA3 standard implementation",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=fortinet_security_advisories\u0026qid=FG-IR-19-107"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2019-9498"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-585"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-287",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-346",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-264",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160933"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9498"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.7,
        "url": "https://w1.fi/security/2019-4/"
      },
      {
        "trust": 2.4,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:03.wpa.asc"
      },
      {
        "trust": 1.9,
        "url": "https://wpa3.mathyvanhoef.com/"
      },
      {
        "trust": 1.8,
        "url": "https://seclists.org/bugtraq/2019/may/40"
      },
      {
        "trust": 1.8,
        "url": "https://www.synology.com/security/advisory/synology_sa_19_16"
      },
      {
        "trust": 1.8,
        "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00030.html"
      },
      {
        "trust": 1.8,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-1/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-2/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-3/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/hostapd/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/cgit/hostap/log/"
      },
      {
        "trust": 1.6,
        "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
      },
      {
        "trust": 1.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9498"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56obbojjskrtdgexzovfstp4hdsdblae/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/svmjofeybgxzlff5iolw67ssopkfejp3/"
      },
      {
        "trust": 1.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9495"
      },
      {
        "trust": 1.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9499"
      },
      {
        "trust": 1.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9497"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/svmjofeybgxzlff5iolw67ssopkfejp3/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56obbojjskrtdgexzovfstp4hdsdblae/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/tdozgr3t7fvo5jszwk2qpr7aofiejtiz/"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9494"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9496"
      },
      {
        "trust": 0.8,
        "url": "https://w1.fi/wpa_supplicant/ "
      },
      {
        "trust": 0.8,
        "url": "https://freeradius.org/security/"
      },
      {
        "trust": 0.8,
        "url": "https://en.avm.de/service/current-security-notifications/"
      },
      {
        "trust": 0.8,
        "url": "https://www.lancom-systems.com/service-support/instant-help/general-security-information/"
      },
      {
        "trust": 0.8,
        "url": "https://github.com/openssl/openssl/pull/8750"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/tdozgr3t7fvo5jszwk2qpr7aofiejtiz/"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9497"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9498"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9499"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9494"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9495"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9496"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu94228755/"
      },
      {
        "trust": 0.8,
        "url": "https://www.kb.cert.org/vuls/id/871675/"
      },
      {
        "trust": 0.8,
        "url": "https://w1.fi/wpa_supplicant/"
      },
      {
        "trust": 0.6,
        "url": "https://security-tracker.debian.org/tracker/dla-1867-1"
      },
      {
        "trust": 0.6,
        "url": "http://www.debian.org/security/2019/dsa-4430"
      },
      {
        "trust": 0.6,
        "url": "https://fortiguard.com/psirt/fg-ir-19-107"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.0047/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.4125/"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/wpa-supplicant-four-vulnerabilities-29006"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/152481/debian-security-advisory-4430-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/81182"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/78946"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.2875/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.1775/"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1699164"
      },
      {
        "trust": 0.3,
        "url": "https://w1.fi"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9497"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9498"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9499"
      },
      {
        "trust": 0.3,
        "url": "https://w1.fi/security/2019-4/eap-pwd-missing-commit-validation.txt"
      },
      {
        "trust": 0.3,
        "url": "https://www.freebsd.org/security/advisories/freebsd-sa-19:03.wpa.asc"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1699168"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1699170"
      },
      {
        "trust": 0.3,
        "url": "https://usn.ubuntu.com/3944-1"
      },
      {
        "trust": 0.3,
        "url": "https://seclists.org/oss-sec/2019/q2/19"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/287.html"
      },
      {
        "trust": 0.1,
        "url": "https://www.rapid7.com/db/vulnerabilities/debian-cve-2019-9498"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/3944-1/"
      },
      {
        "trust": 0.1,
        "url": "https://www.kb.cert.org/vuls/id/871675"
      },
      {
        "trust": 0.1,
        "url": "https://tools.cisco.com/security/center/viewalert.x?alertid=59995"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3944-1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2:2.6-18ubuntu1.1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.2"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.7"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-10743"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.4"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "https://security-tracker.debian.org/tracker/wpa"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11555\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=nnnnnn\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-11.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9494\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9497\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-12.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9499\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-1\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-4\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-5\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-2\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-3\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://www.freebsd.org/handbook/makeworld.html\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-11.patch"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9496\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:03.wpa.asc\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9495\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9498\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-12.patch"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160933"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9498"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-585"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9498"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160933"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9498"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-585"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9498"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-04-12T00:00:00",
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "date": "2019-04-17T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160933"
      },
      {
        "date": "2019-04-17T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9498"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "BID",
        "id": "108401"
      },
      {
        "date": "2019-04-16T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "date": "2019-04-11T14:08:48",
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "date": "2019-04-11T14:10:46",
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "date": "2019-05-15T15:30:08",
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "date": "2019-04-11T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201904-585"
      },
      {
        "date": "2019-04-17T14:29:04.010000",
        "db": "NVD",
        "id": "CVE-2019-9498"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-06-05T00:00:00",
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "date": "2020-10-22T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160933"
      },
      {
        "date": "2020-10-22T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9498"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "BID",
        "id": "108401"
      },
      {
        "date": "2019-12-27T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "date": "2020-11-23T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201904-585"
      },
      {
        "date": "2024-11-21T04:51:44.190000",
        "db": "NVD",
        "id": "CVE-2019-9498"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-585"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "WPA3 design issues and implementation vulnerabilities in hostapd and wpa_supplicant",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "authorization issue",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-585"
      }
    ],
    "trust": 0.6
  }
}

    VAR-201904-0382

    Vulnerability from variot - Updated: 2024-11-23 21:02

    The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. WPA3 Protocol and hostapd When wpa_supplicant There are multiple vulnerabilities in the implementation of, and a remote attacker can obtain weak password information and privileges, as well as disrupt service operations. (DoS) An attack may be carried out. These vulnerabilities "Dragonblood" It is called. CERT/CC Then continue WPA3 The protocol is being verified. Discovered this time WPA3 Vulnerabilities related to the implementation of can be attributed to the protocol specification itself. WPA3 Is a key exchange protocol, Simultaneous Authentication of Equals (SAE) Is adopted. this is "Dragonfly Key Exchange" It is also called WPA2 In Pre-Shared Key (PSK) Acts as a protocol replacement. hostapd Is WPA3 Access point and authentication server daemon is. Also, wpa_supplicant Is WPA authenticator ( access point ) Implemented key exchange with supplicant ( client ) And WPA3 Is supported. hostapd When wpa_supplicant Both Extensible Authentication Protocol Password (EAP-PWD) When SAE Has the following vulnerabilities: Elliptic curve crypto group (ECC groups) Against SAE Cache-based attacks (SAE Side channel attack ) (CWE-208, CWE-524) - CVE-2019-9494 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to observable timing differences and cache access patterns. Elliptic curve crypto group (ECC groups) Against EAP-PWD Cache-based attack (EAP-PWD Side channel attack ) (CWE-524) - CVE-2019-9495 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to cache access patterns. SAE confirm Message validation is not performed during processing (CWE-642) - CVE-2019-9496 hostapd Process hostapd/AP When operating in mode SAE confirm Incomplete verification of message processing due to incorrect authentication sequence hostapd The process may end. EAP-PWD Peer In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9499 wpa_supplicant (EAP Peer) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated. A side-channel attack captures information that can be used to recover passwords - CVE-2019-9494 * A weak password is obtained by a dictionary attack - CVE-2019-9495 This attack requires the authority to install and execute applications. Memory access pattern analysis is possible by observing the shared cache. hostapd/wpa_supplicant 2.7 And later versions CVE-2019-9494 Is not affected by the timing attack hostapd Process can be terminated ( Service operation interruption ) - CVE-2019-9496 *EAP-PWD Authentication is bypassed - CVE-2019-9497 Crypto library EC point If a verification process is implemented for an attacker, an attacker cannot acquire or exchange a session key * Illegal scalar / Session key is obtained using message with element value and authentication is bypassed - CVE-2019-9498, CVE-2019-9499. WPA is prone to multiple security weaknesses. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. A vulnerability in the EAP-pwd implementation of wpa_supplicant (EAP peer) could allow an unauthenticated, adjacent malicious user to gain access to a targeted network.

    The vendor has confirmed the vulnerability and released software updates. ========================================================================== Ubuntu Security Notice USN-3944-1 April 10, 2019

    wpa vulnerabilities

    A security issue affects these releases of Ubuntu and its derivatives:

    • Ubuntu 18.10
    • Ubuntu 18.04 LTS
    • Ubuntu 16.04 LTS
    • Ubuntu 14.04 LTS

    Summary:

    Several security issues were fixed in wpa_supplicant and hostapd.

    Software Description: - wpa: client support for WPA and WPA2

    Details:

    It was discovered that wpa_supplicant and hostapd were vulnerable to a side channel attack against EAP-pwd. A remote attacker could possibly use this issue to recover certain passwords. A remote attacker could possibly use this issue to perform a reflection attack and authenticate without the appropriate password. (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499)

    It was discovered that hostapd incorrectly handled obtaining random numbers. In rare cases where the urandom device isn't available, it would fall back to using a low-quality PRNG. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10743)

    Update instructions:

    The problem can be corrected by updating your system to the following package versions:

    Ubuntu 18.10: hostapd 2:2.6-18ubuntu1.1 wpasupplicant 2:2.6-18ubuntu1.1

    Ubuntu 18.04 LTS: hostapd 2:2.6-15ubuntu2.2 wpasupplicant 2:2.6-15ubuntu2.2

    Ubuntu 16.04 LTS: hostapd 2.4-0ubuntu6.4 wpasupplicant 2.4-0ubuntu6.4

    Ubuntu 14.04 LTS: hostapd 2.1-0ubuntu1.7 wpasupplicant 2.1-0ubuntu1.7

    After a standard system update you need to reboot your computer to make all the necessary changes.

    References: https://usn.ubuntu.com/usn/usn-3944-1 CVE-2016-10743, CVE-2019-9495, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499

    Package Information: https://launchpad.net/ubuntu/+source/wpa/2:2.6-18ubuntu1.1 https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.2 https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.4 https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.7 . These vulnerability are also collectively known as "Dragonblood".

    CVE-2019-9495

    Cache-based side-channel attack against the EAP-pwd implementation: an
attacker able to run unprivileged code on the target machine (including for
example javascript code in a browser on a smartphone) during the handshake
could deduce enough information to discover the password in a dictionary
attack.

    CVE-2019-9498

    EAP-pwd server missing commit validation for scalar/element: hostapd
doesn't validate values received in the EAP-pwd-Commit message, so an
attacker could use a specially crafted commit message to manipulate the
exchange in order for hostapd to derive a session key from a limited set of
possible values.

    CVE-2019-9499

    EAP-pwd peer missing commit validation for scalar/element: wpa_supplicant
doesn't validate values received in the EAP-pwd-Commit message, so an
attacker could use a specially crafted commit message to manipulate the
exchange in order for wpa_supplicant to derive a session key from a limited
set of possible values. This could result in an attacker being able to
complete authentication and operate as a rogue AP.

    Note that the Dragonblood moniker also applies to CVE-2019-9494 and CVE-2014-9496 which are vulnerabilities in the SAE protocol in WPA3. SAE is not enabled in Debian stretch builds of wpa, which is thus not vulnerable by default.

    Due to the complexity of the backporting process, the fix for these vulnerabilities are partial. Users are advised to use strong passwords to prevent dictionary attacks or use a 2.7-based version from stretch-backports (version above 2:2.7+git20190128+0c1e29f-4).

    For the stable distribution (stretch), these problems have been fixed in version 2:2.4-1+deb9u3.

    We recommend that you upgrade your wpa packages.

    For the detailed security status of wpa please refer to its security tracker page at: https://security-tracker.debian.org/tracker/wpa

    Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlyu2lQACgkQ3rYcyPpX RFtamggAlq8telLPhKzD1+Ns+Pci+Y+WkOAmUpn4XQ0TOmG18sDU1iS2xNHF+buA lXVKLp7zgE4VFJsclHAJXtp8anyo7YU99NzUcSF6vboRm3msifL4eE3S7IS9fAaH 0WWCHwlHMf9IGHqBn9mkwiYySwlId8ps3lvoVV2EOB4wJqa4Y6d4YrqPyFzWop56 jKTlTcJqvQBUFo/y9In/sx8QgONhNwnNAKcrBfiVwn8QHuMRA4c4UJz+NN38ctyt djA/zqT/uXwWhr8Mfl7J+rfdsC5TFPl45qr/gbmB7GRlU2la0dGJv/l0afbINrrG NoAgpOeMrwijIdDJ9vG6O3YVV6bIkg==OkO5 -----END PGP SIGNATURE----- . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

    ============================================================================= FreeBSD-SA-19:03.wpa Security Advisory The FreeBSD Project

    Topic: Multiple vulnerabilities in hostapd and wpa_supplicant

    Category: contrib Module: wpa Announced: 2019-05-14 Affects: All supported versions of FreeBSD. Corrected: 2019-05-01 01:42:38 UTC (stable/12, 12.0-STABLE) 2019-05-14 22:57:29 UTC (releng/12.0, 12.0-RELEASE-p4) 2019-05-01 01:43:17 UTC (stable/11, 11.2-STABLE) 2019-05-14 22:59:32 UTC (releng/11.2, 11.2-RELEASE-p10) CVE Name: CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, CVE-2019-11555

    For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit .

    I. Background

    Wi-Fi Protected Access II (WPA2) is a security protocol developed by the Wi-Fi Alliance to secure wireless computer networks.

    hostapd(8) and wpa_supplicant(8) are implementations of user space daemon for access points and wireless client that implements the WPA2 protocol.

    II. Problem Description

    Multiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8) implementations. For more details, please see the reference URLs in the References section below.

    III. Impact

    Security of the wireless network may be compromised. For more details, please see the reference URLS in the References section below.

    IV. Workaround

    No workaround is available, but systems not using hostapd(8) or wpa_supplicant(8) are not affected.

    V. Solution

    Perform one of the following:

    1) Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date.

    Afterwards, restart hostapd(8) or wpa_supplicant(8).

    2) To update your vulnerable system via a binary patch:

    Systems running a RELEASE version of FreeBSD on the i386 or amd64 platforms can be updated via the freebsd-update(8) utility:

    freebsd-update fetch

    freebsd-update install

    Afterwards, restart hostapd(8) or wpa_supplicant(8).

    3) To update your vulnerable system via a source code patch:

    The following patches have been verified to apply to the applicable FreeBSD release branches.

    a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility.

    [FreeBSD 12.0]

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch.asc

    gpg --verify wpa-12.patch.asc

    [FreeBSD 11.2]

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch.asc

    gpg --verify wpa-11.patch.asc

    b) Apply the patch. Execute the following commands as root:

    cd /usr/src

    patch < /path/to/patch

    c) Recompile the operating system using buildworld and installworld as described in .

    Restart the applicable daemons, or reboot the system.

    VI. Correction details

    The following list contains the correction revision numbers for each affected branch.

    Branch/path Revision

    stable/12/ r346980 releng/12.0/ r347587 stable/11/ r346981 releng/11.2/ r347588

    To see which files were modified by a particular revision, run the following command, replacing NNNNNN with the revision number, on a machine with Subversion installed:

    svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

    Or visit the following URL, replacing NNNNNN with the revision number:

    VII. References

    The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlzbTrVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n 5cLsaA/9EB577JYdYdwFCOQ6TiOVhyluLJzgrhG3aiXeBntj8ytkRjcXKnP0aega 3G2R1do7pixVYUF52OWJwaNO3Hm+LHMngiOqujcLI+49ISI3T/APaU/D2dqmXVb8 nN/Pd+0HDGj3R3MwyyHT8/3fX0pJ395vcQhYb61M6PUSrwr8uiBbILT57iCadZoL F4KOCvRv7I4EFWXvqngGfeohZbbeHPBga2DwuebWR/E/1uWrMKEOF2pvh4b6ZSN2 pdr7ZHMiL1cZt+p+2gwWoqDWyD93u2lTC7Gmo3Vom+meH7eaQ79obXEN541aiQ04 CYhjkwuW5uNGUWCO/Xsfn5gqICeB1G5A/aBHQlAyVgUGia8jukL1jn3ga4AQgKrN h9aTmvrQs17PjMVtq81ZS0xm0ztW0Y6t2A9fRgGcnOOw+uy5tHMbJaKSMy8x97NT gUyXtoyu47tjjMrzsQcma2t6/+iCEDuW1P1LybSmv/v59gro9uveCdl0busgM9GS M5bpWK/qYQS1HYmYeTKMRynmD8ntRbflYoUP/SpijHsz+56rgyeJO12WyltyT32f j5fgnKaznW/UPtgmK0wnPIG9XEj3Nzs4C4cypO5t8OiuLEli4wRdb6MYlvEjq4la R3lnCzmTd9sg+K6cod2qWWSYdsdEwizcpQDp7M9lRqomiANLqJ4= =MXma -----END PGP SIGNATURE-----

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201904-0382",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "freebsd",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "11.0"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "30"
      },
      {
        "model": "backports sle",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.0"
      },
      {
        "model": "router manager",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "1.2"
      },
      {
        "model": "radius server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "3.0"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "11.2"
      },
      {
        "model": "wpa supplicant",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.5"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "28"
      },
      {
        "model": "hostapd",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.7"
      },
      {
        "model": "hostapd",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.4"
      },
      {
        "model": "wpa supplicant",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.7"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "12.0"
      },
      {
        "model": "hostapd",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.5"
      },
      {
        "model": "wpa supplicant",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.4"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "29"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "8.0"
      },
      {
        "model": "freebsd",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "11.1"
      },
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.1"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "broadcom",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "freeradius",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "",
        "scope": null,
        "trust": 0.8,
        "vendor": "multiple vendors",
        "version": null
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 fi",
        "version": "0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 fi",
        "version": "0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "18.10"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "18.04"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "16.04"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "14.04"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9499"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:misc:multiple_vendors",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Debian",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-588"
      }
    ],
    "trust": 0.7
  },
  "cve": "CVE-2019-9499",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2019-9499",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.1,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Medium",
            "accessVector": "Adjacent Network",
            "authentication": "Single",
            "author": "JPCERT/CC",
            "availabilityImpact": "Partial",
            "baseScore": 7.0,
            "confidentialityImpact": "Complete",
            "exploitabilityScore": null,
            "id": "JVNDB-2019-002625",
            "impactScore": null,
            "integrityImpact": "Complete",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "VHN-160934",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.2,
            "id": "CVE-2019-9499",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "High",
            "attackVector": "Adjacent Network",
            "author": "JPCERT/CC",
            "availabilityImpact": "Low",
            "baseScore": 6.7,
            "baseSeverity": "Medium",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "JVNDB-2019-002625",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2019-9499",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "JPCERT/CC",
            "id": "JVNDB-2019-002625",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201904-588",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-160934",
            "trust": 0.1,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2019-9499",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160934"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9499"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-588"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9499"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The implementations of EAP-PWD in wpa_supplicant EAP Peer, when built against a crypto library missing explicit validation on imported elements, do not validate the scalar and element values in EAP-pwd-Commit. An attacker may complete authentication, session key and control of the data connection with a client. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. WPA3 Protocol and hostapd When wpa_supplicant There are multiple vulnerabilities in the implementation of, and a remote attacker can obtain weak password information and privileges, as well as disrupt service operations. (DoS) An attack may be carried out. These vulnerabilities \"Dragonblood\" It is called. CERT/CC Then continue WPA3 The protocol is being verified. Discovered this time WPA3 Vulnerabilities related to the implementation of can be attributed to the protocol specification itself. WPA3 Is a key exchange protocol, Simultaneous Authentication of Equals (SAE) Is adopted. this is \"Dragonfly Key Exchange\" It is also called WPA2 In Pre-Shared Key (PSK) Acts as a protocol replacement. hostapd Is WPA3 Access point and authentication server daemon is. Also, wpa_supplicant Is WPA authenticator ( access point ) Implemented key exchange with supplicant ( client ) And WPA3 Is supported. hostapd When wpa_supplicant Both Extensible Authentication Protocol Password (EAP-PWD) When SAE Has the following vulnerabilities: Elliptic curve crypto group (ECC groups) Against SAE Cache-based attacks (SAE Side channel attack ) (CWE-208, CWE-524) - CVE-2019-9494 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to observable timing differences and cache access patterns. Elliptic curve crypto group (ECC groups) Against EAP-PWD Cache-based attack (EAP-PWD Side channel attack ) (CWE-524) - CVE-2019-9495 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to cache access patterns. SAE confirm Message validation is not performed during processing (CWE-642) - CVE-2019-9496 hostapd Process hostapd/AP When operating in mode SAE confirm Incomplete verification of message processing due to incorrect authentication sequence hostapd The process may end. EAP-PWD Peer In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9499 wpa_supplicant (EAP Peer) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated.* A side-channel attack captures information that can be used to recover passwords - CVE-2019-9494 * A weak password is obtained by a dictionary attack - CVE-2019-9495 This attack requires the authority to install and execute applications. Memory access pattern analysis is possible by observing the shared cache. hostapd/wpa_supplicant 2.7 And later versions CVE-2019-9494 Is not affected by the timing attack *hostapd Process can be terminated ( Service operation interruption ) - CVE-2019-9496 *EAP-PWD Authentication is bypassed - CVE-2019-9497 Crypto library EC point If a verification process is implemented for an attacker, an attacker cannot acquire or exchange a session key * Illegal scalar / Session key is obtained using message with element value and authentication is bypassed - CVE-2019-9498, CVE-2019-9499. WPA is prone to multiple security weaknesses. \nAttackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. A vulnerability in the EAP-pwd implementation of wpa_supplicant (EAP peer) could allow an unauthenticated, adjacent malicious user to gain access to a targeted network.  \n\nThe vendor has confirmed the vulnerability and released software updates. ==========================================================================\nUbuntu Security Notice USN-3944-1\nApril 10, 2019\n\nwpa vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 18.10\n- Ubuntu 18.04 LTS\n- Ubuntu 16.04 LTS\n- Ubuntu 14.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in wpa_supplicant and hostapd. \n\nSoftware Description:\n- wpa: client support for WPA and WPA2\n\nDetails:\n\nIt was discovered that wpa_supplicant and hostapd were vulnerable to a\nside channel attack against EAP-pwd. A remote attacker could possibly use\nthis issue to recover certain passwords. A\nremote attacker could possibly use this issue to perform a reflection\nattack and authenticate without the appropriate password. (CVE-2019-9497,\nCVE-2019-9498, CVE-2019-9499)\n\nIt was discovered that hostapd incorrectly handled obtaining random\nnumbers. In rare cases where the urandom device isn\u0027t available, it would\nfall back to using a low-quality PRNG. This issue only affected Ubuntu\n14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10743)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 18.10:\n  hostapd                         2:2.6-18ubuntu1.1\n  wpasupplicant                   2:2.6-18ubuntu1.1\n\nUbuntu 18.04 LTS:\n  hostapd                         2:2.6-15ubuntu2.2\n  wpasupplicant                   2:2.6-15ubuntu2.2\n\nUbuntu 16.04 LTS:\n  hostapd                         2.4-0ubuntu6.4\n  wpasupplicant                   2.4-0ubuntu6.4\n\nUbuntu 14.04 LTS:\n  hostapd                         2.1-0ubuntu1.7\n  wpasupplicant                   2.1-0ubuntu1.7\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n\nReferences:\n  https://usn.ubuntu.com/usn/usn-3944-1\n  CVE-2016-10743, CVE-2019-9495, CVE-2019-9497, CVE-2019-9498,\n  CVE-2019-9499\n\nPackage Information:\n  https://launchpad.net/ubuntu/+source/wpa/2:2.6-18ubuntu1.1\n  https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.2\n  https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.4\n  https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.7\n. These vulnerability are also collectively\nknown as \"Dragonblood\". \n\nCVE-2019-9495\n\n    Cache-based side-channel attack against the EAP-pwd implementation: an\n    attacker able to run unprivileged code on the target machine (including for\n    example javascript code in a browser on a smartphone) during the handshake\n    could deduce enough information to discover the password in a dictionary\n    attack. \n\nCVE-2019-9498\n\n    EAP-pwd server missing commit validation for scalar/element: hostapd\n    doesn\u0027t validate values received in the EAP-pwd-Commit message, so an\n    attacker could use a specially crafted commit message to manipulate the\n    exchange in order for hostapd to derive a session key from a limited set of\n    possible values. \n\nCVE-2019-9499\n\n    EAP-pwd peer missing commit validation for scalar/element: wpa_supplicant\n    doesn\u0027t validate values received in the EAP-pwd-Commit message, so an\n    attacker could use a specially crafted commit message to manipulate the\n    exchange in order for wpa_supplicant to derive a session key from a limited\n    set of possible values. This could result in an attacker being able to\n    complete authentication and operate as a rogue AP. \n\nNote that the Dragonblood moniker also applies to CVE-2019-9494 and\nCVE-2014-9496 which are vulnerabilities in the SAE protocol in WPA3. SAE is not\nenabled in Debian stretch builds of wpa, which is thus not vulnerable by default. \n\nDue to the complexity of the backporting process, the fix for these\nvulnerabilities are partial. Users are advised to use strong passwords to\nprevent dictionary attacks or use a 2.7-based version from stretch-backports\n(version above 2:2.7+git20190128+0c1e29f-4). \n\nFor the stable distribution (stretch), these problems have been fixed in\nversion 2:2.4-1+deb9u3. \n\nWe recommend that you upgrade your wpa packages. \n\nFor the detailed security status of wpa please refer to\nits security tracker page at:\nhttps://security-tracker.debian.org/tracker/wpa\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\n\niQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlyu2lQACgkQ3rYcyPpX\nRFtamggAlq8telLPhKzD1+Ns+Pci+Y+WkOAmUpn4XQ0TOmG18sDU1iS2xNHF+buA\nlXVKLp7zgE4VFJsclHAJXtp8anyo7YU99NzUcSF6vboRm3msifL4eE3S7IS9fAaH\n0WWCHwlHMf9IGHqBn9mkwiYySwlId8ps3lvoVV2EOB4wJqa4Y6d4YrqPyFzWop56\njKTlTcJqvQBUFo/y9In/sx8QgONhNwnNAKcrBfiVwn8QHuMRA4c4UJz+NN38ctyt\ndjA/zqT/uXwWhr8Mfl7J+rfdsC5TFPl45qr/gbmB7GRlU2la0dGJv/l0afbINrrG\nNoAgpOeMrwijIdDJ9vG6O3YVV6bIkg==OkO5\n-----END PGP SIGNATURE-----\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n=============================================================================\nFreeBSD-SA-19:03.wpa                                        Security Advisory\n                                                          The FreeBSD Project\n\nTopic:          Multiple vulnerabilities in hostapd and wpa_supplicant\n\nCategory:       contrib\nModule:         wpa\nAnnounced:      2019-05-14\nAffects:        All supported versions of FreeBSD. \nCorrected:      2019-05-01 01:42:38 UTC (stable/12, 12.0-STABLE)\n                2019-05-14 22:57:29 UTC (releng/12.0, 12.0-RELEASE-p4)\n                2019-05-01 01:43:17 UTC (stable/11, 11.2-STABLE)\n                2019-05-14 22:59:32 UTC (releng/11.2, 11.2-RELEASE-p10)\nCVE Name:       CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497,\n                CVE-2019-9498, CVE-2019-9499, CVE-2019-11555\n\nFor general information regarding FreeBSD Security Advisories,\nincluding descriptions of the fields above, security branches, and the\nfollowing sections, please visit \u003cURL:https://security.FreeBSD.org/\u003e. \n\nI.   Background\n\nWi-Fi Protected Access II (WPA2) is a security protocol developed by the\nWi-Fi Alliance to secure wireless computer networks. \n\nhostapd(8) and wpa_supplicant(8) are implementations of user space daemon for\naccess points and wireless client that implements the WPA2 protocol. \n\nII.  Problem Description\n\nMultiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8)\nimplementations.  For more details, please see the reference URLs in the\nReferences section below. \n\nIII. Impact\n\nSecurity of the wireless network may be compromised.  For more details,\nplease see the reference URLS in the References section below. \n\nIV.  Workaround\n\nNo workaround is available, but systems not using hostapd(8) or\nwpa_supplicant(8) are not affected. \n\nV.   Solution\n\nPerform one of the following:\n\n1) Upgrade your vulnerable system to a supported FreeBSD stable or\nrelease / security branch (releng) dated after the correction date. \n\nAfterwards, restart hostapd(8) or wpa_supplicant(8). \n\n2) To update your vulnerable system via a binary patch:\n\nSystems running a RELEASE version of FreeBSD on the i386 or amd64\nplatforms can be updated via the freebsd-update(8) utility:\n\n# freebsd-update fetch\n# freebsd-update install\n\nAfterwards, restart hostapd(8) or wpa_supplicant(8). \n\n3) To update your vulnerable system via a source code patch:\n\nThe following patches have been verified to apply to the applicable\nFreeBSD release branches. \n\na) Download the relevant patch from the location below, and verify the\ndetached PGP signature using your PGP utility. \n\n[FreeBSD 12.0]\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch.asc\n# gpg --verify wpa-12.patch.asc\n\n[FreeBSD 11.2]\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch.asc\n# gpg --verify wpa-11.patch.asc\n\nb) Apply the patch.  Execute the following commands as root:\n\n# cd /usr/src\n# patch \u003c /path/to/patch\n\nc) Recompile the operating system using buildworld and installworld as\ndescribed in \u003cURL:https://www.FreeBSD.org/handbook/makeworld.html\u003e. \n\nRestart the applicable daemons, or reboot the system. \n\nVI.  Correction details\n\nThe following list contains the correction revision numbers for each\naffected branch. \n\nBranch/path                                                      Revision\n- -------------------------------------------------------------------------\nstable/12/                                                        r346980\nreleng/12.0/                                                      r347587\nstable/11/                                                        r346981\nreleng/11.2/                                                      r347588\n- -------------------------------------------------------------------------\n\nTo see which files were modified by a particular revision, run the\nfollowing command, replacing NNNNNN with the revision number, on a\nmachine with Subversion installed:\n\n# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base\n\nOr visit the following URL, replacing NNNNNN with the revision number:\n\n\u003cURL:https://svnweb.freebsd.org/base?view=revision\u0026revision=NNNNNN\u003e\n\nVII. References\n\n\u003cURL:https://w1.fi/security/2019-1\u003e\n\u003cURL:https://w1.fi/security/2019-2\u003e\n\u003cURL:https://w1.fi/security/2019-3\u003e\n\u003cURL:https://w1.fi/security/2019-4\u003e\n\u003cURL:https://w1.fi/security/2019-5\u003e\n\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9494\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9496\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11555\u003e\n\nThe latest revision of this advisory is available at\n\u003cURL:https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc\u003e\n-----BEGIN PGP SIGNATURE-----\n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\nR3lnCzmTd9sg+K6cod2qWWSYdsdEwizcpQDp7M9lRqomiANLqJ4=\n=MXma\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-9499"
      },
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160934"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9499"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      }
    ],
    "trust": 3.06
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-9499",
        "trust": 3.2
      },
      {
        "db": "CERT/CC",
        "id": "VU#871675",
        "trust": 1.7
      },
      {
        "db": "JVN",
        "id": "JVNVU94228755",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-588",
        "trust": 0.7
      },
      {
        "db": "PACKETSTORM",
        "id": "152481",
        "trust": 0.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.0047",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1258",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.2875",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.4125",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1775",
        "trust": 0.6
      },
      {
        "db": "BID",
        "id": "108401",
        "trust": 0.3
      },
      {
        "db": "VULHUB",
        "id": "VHN-160934",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9499",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152477",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152914",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160934"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9499"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-588"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9499"
      }
    ]
  },
  "id": "VAR-201904-0382",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160934"
      }
    ],
    "trust": 0.725
  },
  "last_update_date": "2024-11-23T21:02:34.817000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "WPA Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=91400"
      },
      {
        "title": "Ubuntu Security Notice: wpa vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=USN-3944-1"
      },
      {
        "title": "Debian CVElist Bug Report Logs: src:wpa: multiples vulnerabilities in SAE and EAP-pwd code in wpa",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=39e042d68cbe59a677ae53b8328d282d"
      },
      {
        "title": "Debian Security Advisories: DSA-4430-1 wpa -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=81a56edb299848e0579a7dd950bd73ba"
      },
      {
        "title": "Brocade Security Advisories: BSA-2019-777",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=brocade_security_advisories\u0026qid=9f89054fc8bab7a9de83cce34e487404"
      },
      {
        "title": "Fortinet Security Advisories: Dragonblood vulnerabilities in WiFi WPA3 standard implementation",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=fortinet_security_advisories\u0026qid=FG-IR-19-107"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2019-9499"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-588"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-287",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-346",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-264",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160934"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9499"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.7,
        "url": "https://w1.fi/security/2019-4/"
      },
      {
        "trust": 2.4,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:03.wpa.asc"
      },
      {
        "trust": 1.9,
        "url": "https://wpa3.mathyvanhoef.com/"
      },
      {
        "trust": 1.8,
        "url": "https://seclists.org/bugtraq/2019/may/40"
      },
      {
        "trust": 1.8,
        "url": "https://www.synology.com/security/advisory/synology_sa_19_16"
      },
      {
        "trust": 1.8,
        "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00030.html"
      },
      {
        "trust": 1.8,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-1/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-2/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-3/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/hostapd/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/cgit/hostap/log/"
      },
      {
        "trust": 1.6,
        "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
      },
      {
        "trust": 1.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9499"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56obbojjskrtdgexzovfstp4hdsdblae/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/svmjofeybgxzlff5iolw67ssopkfejp3/"
      },
      {
        "trust": 1.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9495"
      },
      {
        "trust": 1.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9498"
      },
      {
        "trust": 1.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9497"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/svmjofeybgxzlff5iolw67ssopkfejp3/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56obbojjskrtdgexzovfstp4hdsdblae/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/tdozgr3t7fvo5jszwk2qpr7aofiejtiz/"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9494"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9496"
      },
      {
        "trust": 0.8,
        "url": "https://w1.fi/wpa_supplicant/ "
      },
      {
        "trust": 0.8,
        "url": "https://freeradius.org/security/"
      },
      {
        "trust": 0.8,
        "url": "https://en.avm.de/service/current-security-notifications/"
      },
      {
        "trust": 0.8,
        "url": "https://www.lancom-systems.com/service-support/instant-help/general-security-information/"
      },
      {
        "trust": 0.8,
        "url": "https://github.com/openssl/openssl/pull/8750"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/tdozgr3t7fvo5jszwk2qpr7aofiejtiz/"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9497"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9498"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9499"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9494"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9495"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9496"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu94228755/"
      },
      {
        "trust": 0.8,
        "url": "https://www.kb.cert.org/vuls/id/871675/"
      },
      {
        "trust": 0.8,
        "url": "https://w1.fi/wpa_supplicant/"
      },
      {
        "trust": 0.6,
        "url": "https://security-tracker.debian.org/tracker/dla-1867-1"
      },
      {
        "trust": 0.6,
        "url": "http://www.debian.org/security/2019/dsa-4430"
      },
      {
        "trust": 0.6,
        "url": "https://fortiguard.com/psirt/fg-ir-19-107"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.0047/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.4125/"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/wpa-supplicant-four-vulnerabilities-29006"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/152481/debian-security-advisory-4430-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/81182"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/78946"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.2875/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.1775/"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1699164"
      },
      {
        "trust": 0.3,
        "url": "https://w1.fi"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9497"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9498"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9499"
      },
      {
        "trust": 0.3,
        "url": "https://w1.fi/security/2019-4/eap-pwd-missing-commit-validation.txt"
      },
      {
        "trust": 0.3,
        "url": "https://www.freebsd.org/security/advisories/freebsd-sa-19:03.wpa.asc"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1699168"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1699170"
      },
      {
        "trust": 0.3,
        "url": "https://usn.ubuntu.com/3944-1"
      },
      {
        "trust": 0.3,
        "url": "https://seclists.org/oss-sec/2019/q2/19"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/287.html"
      },
      {
        "trust": 0.1,
        "url": "https://www.rapid7.com/db/vulnerabilities/debian-cve-2019-9499"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/3944-1/"
      },
      {
        "trust": 0.1,
        "url": "https://www.kb.cert.org/vuls/id/871675"
      },
      {
        "trust": 0.1,
        "url": "https://tools.cisco.com/security/center/viewalert.x?alertid=59996"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3944-1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2:2.6-18ubuntu1.1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.2"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.7"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-10743"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.4"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "https://security-tracker.debian.org/tracker/wpa"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11555\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=nnnnnn\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-11.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9494\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9497\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-12.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9499\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-1\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-4\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-5\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-2\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-3\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://www.freebsd.org/handbook/makeworld.html\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-11.patch"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9496\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:03.wpa.asc\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9495\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9498\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-12.patch"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160934"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9499"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-588"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9499"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160934"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9499"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-588"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9499"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-04-12T00:00:00",
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "date": "2019-04-17T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160934"
      },
      {
        "date": "2019-04-17T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9499"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "BID",
        "id": "108401"
      },
      {
        "date": "2019-04-16T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "date": "2019-04-11T14:08:48",
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "date": "2019-04-11T14:10:46",
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "date": "2019-05-15T15:30:08",
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "date": "2019-04-11T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201904-588"
      },
      {
        "date": "2019-04-17T14:29:04.057000",
        "db": "NVD",
        "id": "CVE-2019-9499"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-06-05T00:00:00",
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "date": "2020-10-22T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160934"
      },
      {
        "date": "2020-10-22T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9499"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "BID",
        "id": "108401"
      },
      {
        "date": "2019-12-27T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "date": "2020-11-23T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201904-588"
      },
      {
        "date": "2024-11-21T04:51:44.337000",
        "db": "NVD",
        "id": "CVE-2019-9499"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-588"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "WPA3 design issues and implementation vulnerabilities in hostapd and wpa_supplicant",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "authorization issue",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-588"
      }
    ],
    "trust": 0.6
  }
}

    VAR-201904-1560

    Vulnerability from variot - Updated: 2024-11-23 20:43

    The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. WPA3 Protocol and hostapd When wpa_supplicant There are multiple vulnerabilities in the implementation of, and a remote attacker can obtain weak password information and privileges, as well as disrupt service operations. (DoS) An attack may be carried out. These vulnerabilities "Dragonblood" It is called. CERT/CC Then continue WPA3 The protocol is being verified. Discovered this time WPA3 Vulnerabilities related to the implementation of can be attributed to the protocol specification itself. WPA3 Is a key exchange protocol, Simultaneous Authentication of Equals (SAE) Is adopted. this is "Dragonfly Key Exchange" It is also called WPA2 In Pre-Shared Key (PSK) Acts as a protocol replacement. hostapd Is WPA3 Access point and authentication server daemon is. Also, wpa_supplicant Is WPA authenticator ( access point ) Implemented key exchange with supplicant ( client ) And WPA3 Is supported. hostapd When wpa_supplicant Both Extensible Authentication Protocol Password (EAP-PWD) When SAE Has the following vulnerabilities: Elliptic curve crypto group (ECC groups) Against SAE Cache-based attacks (SAE Side channel attack ) (CWE-208, CWE-524) - CVE-2019-9494 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to observable timing differences and cache access patterns. SAE confirm Message validation is not performed during processing (CWE-642) - CVE-2019-9496 hostapd Process hostapd/AP When operating in mode SAE confirm Incomplete verification of message processing due to incorrect authentication sequence hostapd The process may end. EAP-PWD Reflection attack (EAP-pwd-Commit Incorrect message validation ) (CWE-301) - CVE-2019-9497 hostapd (EAP Server) And wpa_supplicant (EAP Peer) In EAP-PWD In implementation, EAP-pwd-Commit Message scalar and element values are not validated. EAP-PWD Server In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9498 hostapd (EAP Server) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated. EAP-PWD Peer In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9499 wpa_supplicant (EAP Peer) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated. A side-channel attack captures information that can be used to recover passwords - CVE-2019-9494 * A weak password is obtained by a dictionary attack - CVE-2019-9495 This attack requires the authority to install and execute applications. hostapd/wpa_supplicant 2.7 And later versions CVE-2019-9494 Is not affected by the timing attack hostapd Process can be terminated ( Service operation interruption ) - CVE-2019-9496 *EAP-PWD Authentication is bypassed - CVE-2019-9497 Crypto library EC point If a verification process is implemented for an attacker, an attacker cannot acquire or exchange a session key * Illegal scalar / Session key is obtained using message with element value and authentication is bypassed - CVE-2019-9498, CVE-2019-9499. WPA is prone to a security weakness. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. An attacker who can run arbitrary code on a targeted system by persuading a user to either install a malicious application or follow a malicious link could exploit this vulnerability by observing the memory access patterns through the shared cache. A successful exploit could allow the malicious user to use the information gathered in conjunction with conducting an offline dictionary attack to access the user’s password.

    The vendor has confirmed the vulnerability and released software updates. ========================================================================== Ubuntu Security Notice USN-3944-1 April 10, 2019

    wpa vulnerabilities

    A security issue affects these releases of Ubuntu and its derivatives:

    • Ubuntu 18.10
    • Ubuntu 18.04 LTS
    • Ubuntu 16.04 LTS
    • Ubuntu 14.04 LTS

    Summary:

    Several security issues were fixed in wpa_supplicant and hostapd.

    Software Description: - wpa: client support for WPA and WPA2

    Details:

    It was discovered that wpa_supplicant and hostapd were vulnerable to a side channel attack against EAP-pwd. A remote attacker could possibly use this issue to recover certain passwords. A remote attacker could possibly use this issue to perform a reflection attack and authenticate without the appropriate password. (CVE-2019-9497, CVE-2019-9498, CVE-2019-9499)

    It was discovered that hostapd incorrectly handled obtaining random numbers. In rare cases where the urandom device isn't available, it would fall back to using a low-quality PRNG. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10743)

    Update instructions:

    The problem can be corrected by updating your system to the following package versions:

    Ubuntu 18.10: hostapd 2:2.6-18ubuntu1.1 wpasupplicant 2:2.6-18ubuntu1.1

    Ubuntu 18.04 LTS: hostapd 2:2.6-15ubuntu2.2 wpasupplicant 2:2.6-15ubuntu2.2

    Ubuntu 16.04 LTS: hostapd 2.4-0ubuntu6.4 wpasupplicant 2.4-0ubuntu6.4

    Ubuntu 14.04 LTS: hostapd 2.1-0ubuntu1.7 wpasupplicant 2.1-0ubuntu1.7

    After a standard system update you need to reboot your computer to make all the necessary changes.

    References: https://usn.ubuntu.com/usn/usn-3944-1 CVE-2016-10743, CVE-2019-9495, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499

    Package Information: https://launchpad.net/ubuntu/+source/wpa/2:2.6-18ubuntu1.1 https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.2 https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.4 https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.7 . These vulnerability are also collectively known as "Dragonblood".

    CVE-2019-9495

    Cache-based side-channel attack against the EAP-pwd implementation: an
attacker able to run unprivileged code on the target machine (including for
example javascript code in a browser on a smartphone) during the handshake
could deduce enough information to discover the password in a dictionary
attack. 
This does not result in the attacker being able to derive the session key,
complete the following key exchange and access the network.

    CVE-2019-9498

    EAP-pwd server missing commit validation for scalar/element: hostapd
doesn't validate values received in the EAP-pwd-Commit message, so an
attacker could use a specially crafted commit message to manipulate the
exchange in order for hostapd to derive a session key from a limited set of
possible values. This could result in an attacker being able to complete
authentication and gain access to the network.

    CVE-2019-9499

    EAP-pwd peer missing commit validation for scalar/element: wpa_supplicant
doesn't validate values received in the EAP-pwd-Commit message, so an
attacker could use a specially crafted commit message to manipulate the
exchange in order for wpa_supplicant to derive a session key from a limited
set of possible values. This could result in an attacker being able to
complete authentication and operate as a rogue AP.

    Note that the Dragonblood moniker also applies to CVE-2019-9494 and CVE-2014-9496 which are vulnerabilities in the SAE protocol in WPA3. SAE is not enabled in Debian stretch builds of wpa, which is thus not vulnerable by default.

    Due to the complexity of the backporting process, the fix for these vulnerabilities are partial. Users are advised to use strong passwords to prevent dictionary attacks or use a 2.7-based version from stretch-backports (version above 2:2.7+git20190128+0c1e29f-4).

    For the stable distribution (stretch), these problems have been fixed in version 2:2.4-1+deb9u3.

    We recommend that you upgrade your wpa packages.

    For the detailed security status of wpa please refer to its security tracker page at: https://security-tracker.debian.org/tracker/wpa

    Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlyu2lQACgkQ3rYcyPpX RFtamggAlq8telLPhKzD1+Ns+Pci+Y+WkOAmUpn4XQ0TOmG18sDU1iS2xNHF+buA lXVKLp7zgE4VFJsclHAJXtp8anyo7YU99NzUcSF6vboRm3msifL4eE3S7IS9fAaH 0WWCHwlHMf9IGHqBn9mkwiYySwlId8ps3lvoVV2EOB4wJqa4Y6d4YrqPyFzWop56 jKTlTcJqvQBUFo/y9In/sx8QgONhNwnNAKcrBfiVwn8QHuMRA4c4UJz+NN38ctyt djA/zqT/uXwWhr8Mfl7J+rfdsC5TFPl45qr/gbmB7GRlU2la0dGJv/l0afbINrrG NoAgpOeMrwijIdDJ9vG6O3YVV6bIkg==OkO5 -----END PGP SIGNATURE----- . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

    ============================================================================= FreeBSD-SA-19:03.wpa Security Advisory The FreeBSD Project

    Topic: Multiple vulnerabilities in hostapd and wpa_supplicant

    Category: contrib Module: wpa Announced: 2019-05-14 Affects: All supported versions of FreeBSD. Corrected: 2019-05-01 01:42:38 UTC (stable/12, 12.0-STABLE) 2019-05-14 22:57:29 UTC (releng/12.0, 12.0-RELEASE-p4) 2019-05-01 01:43:17 UTC (stable/11, 11.2-STABLE) 2019-05-14 22:59:32 UTC (releng/11.2, 11.2-RELEASE-p10) CVE Name: CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, CVE-2019-11555

    For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit .

    I. Background

    Wi-Fi Protected Access II (WPA2) is a security protocol developed by the Wi-Fi Alliance to secure wireless computer networks.

    hostapd(8) and wpa_supplicant(8) are implementations of user space daemon for access points and wireless client that implements the WPA2 protocol.

    II. Problem Description

    Multiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8) implementations. For more details, please see the reference URLs in the References section below.

    III. Impact

    Security of the wireless network may be compromised. For more details, please see the reference URLS in the References section below.

    IV. Workaround

    No workaround is available, but systems not using hostapd(8) or wpa_supplicant(8) are not affected.

    V. Solution

    Perform one of the following:

    1) Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date.

    Afterwards, restart hostapd(8) or wpa_supplicant(8).

    2) To update your vulnerable system via a binary patch:

    Systems running a RELEASE version of FreeBSD on the i386 or amd64 platforms can be updated via the freebsd-update(8) utility:

    freebsd-update fetch

    freebsd-update install

    Afterwards, restart hostapd(8) or wpa_supplicant(8).

    3) To update your vulnerable system via a source code patch:

    The following patches have been verified to apply to the applicable FreeBSD release branches.

    a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility.

    [FreeBSD 12.0]

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch.asc

    gpg --verify wpa-12.patch.asc

    [FreeBSD 11.2]

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch.asc

    gpg --verify wpa-11.patch.asc

    b) Apply the patch. Execute the following commands as root:

    cd /usr/src

    patch < /path/to/patch

    c) Recompile the operating system using buildworld and installworld as described in .

    Restart the applicable daemons, or reboot the system.

    VI. Correction details

    The following list contains the correction revision numbers for each affected branch.

    Branch/path Revision

    stable/12/ r346980 releng/12.0/ r347587 stable/11/ r346981 releng/11.2/ r347588

    To see which files were modified by a particular revision, run the following command, replacing NNNNNN with the revision number, on a machine with Subversion installed:

    svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

    Or visit the following URL, replacing NNNNNN with the revision number:

    VII. References

    The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlzbTrVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n 5cLsaA/9EB577JYdYdwFCOQ6TiOVhyluLJzgrhG3aiXeBntj8ytkRjcXKnP0aega 3G2R1do7pixVYUF52OWJwaNO3Hm+LHMngiOqujcLI+49ISI3T/APaU/D2dqmXVb8 nN/Pd+0HDGj3R3MwyyHT8/3fX0pJ395vcQhYb61M6PUSrwr8uiBbILT57iCadZoL F4KOCvRv7I4EFWXvqngGfeohZbbeHPBga2DwuebWR/E/1uWrMKEOF2pvh4b6ZSN2 pdr7ZHMiL1cZt+p+2gwWoqDWyD93u2lTC7Gmo3Vom+meH7eaQ79obXEN541aiQ04 CYhjkwuW5uNGUWCO/Xsfn5gqICeB1G5A/aBHQlAyVgUGia8jukL1jn3ga4AQgKrN h9aTmvrQs17PjMVtq81ZS0xm0ztW0Y6t2A9fRgGcnOOw+uy5tHMbJaKSMy8x97NT gUyXtoyu47tjjMrzsQcma2t6/+iCEDuW1P1LybSmv/v59gro9uveCdl0busgM9GS M5bpWK/qYQS1HYmYeTKMRynmD8ntRbflYoUP/SpijHsz+56rgyeJO12WyltyT32f j5fgnKaznW/UPtgmK0wnPIG9XEj3Nzs4C4cypO5t8OiuLEli4wRdb6MYlvEjq4la R3lnCzmTd9sg+K6cod2qWWSYdsdEwizcpQDp7M9lRqomiANLqJ4= =MXma -----END PGP SIGNATURE-----

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201904-1560",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "28"
      },
      {
        "model": "router manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "synology",
        "version": "1.2.3-8017"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "30"
      },
      {
        "model": "backports sle",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.0"
      },
      {
        "model": "hostapd",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.7"
      },
      {
        "model": "wpa supplicant",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.7"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "12.0"
      },
      {
        "model": "radius server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "3.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "debian",
        "version": "8.0"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "29"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "11.2"
      },
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.1"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "broadcom",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "freeradius",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "",
        "scope": null,
        "trust": 0.8,
        "vendor": "multiple vendors",
        "version": null
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7.1"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.7"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.6"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.5"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.4"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.3"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.2"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.1"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.0"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.7"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7.3"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.3"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.3"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.3"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.3"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.2.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.2.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.2.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.2.0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "18.10"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "18.04"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "16.04"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "14.04"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "BID",
        "id": "107866"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9495"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:misc:multiple_vendors",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Debian,Mathy Vanhoef (New York University Abu Dhabi) and Eyal Ronen (Tel Aviv University),security.freebsd.org",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-569"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2019-9495",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2019-9495",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.1,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Medium",
            "accessVector": "Adjacent Network",
            "authentication": "Single",
            "author": "JPCERT/CC",
            "availabilityImpact": "Partial",
            "baseScore": 7.0,
            "confidentialityImpact": "Complete",
            "exploitabilityScore": null,
            "id": "JVNDB-2019-002625",
            "impactScore": null,
            "integrityImpact": "Complete",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "VHN-160930",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:P/I:N/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "exploitabilityScore": 2.2,
            "id": "CVE-2019-9495",
            "impactScore": 1.4,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "High",
            "attackVector": "Adjacent Network",
            "author": "JPCERT/CC",
            "availabilityImpact": "Low",
            "baseScore": 6.7,
            "baseSeverity": "Medium",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "JVNDB-2019-002625",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2019-9495",
            "trust": 1.0,
            "value": "LOW"
          },
          {
            "author": "JPCERT/CC",
            "id": "JVNDB-2019-002625",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201904-569",
            "trust": 0.6,
            "value": "LOW"
          },
          {
            "author": "VULHUB",
            "id": "VHN-160930",
            "trust": 0.1,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2019-9495",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160930"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9495"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-569"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9495"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns. All versions of hostapd and wpa_supplicant with EAP-PWD support are vulnerable. The ability to install and execute applications is necessary for a successful attack. Memory access patterns are visible in a shared cache. Weak passwords may be cracked. Versions of hostapd/wpa_supplicant 2.7 and newer, are not vulnerable to the timing attack described in CVE-2019-9494. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. WPA3 Protocol and hostapd When wpa_supplicant There are multiple vulnerabilities in the implementation of, and a remote attacker can obtain weak password information and privileges, as well as disrupt service operations. (DoS) An attack may be carried out. These vulnerabilities \"Dragonblood\" It is called. CERT/CC Then continue WPA3 The protocol is being verified. Discovered this time WPA3 Vulnerabilities related to the implementation of can be attributed to the protocol specification itself. WPA3 Is a key exchange protocol, Simultaneous Authentication of Equals (SAE) Is adopted. this is \"Dragonfly Key Exchange\" It is also called WPA2 In Pre-Shared Key (PSK) Acts as a protocol replacement. hostapd Is WPA3 Access point and authentication server daemon is. Also, wpa_supplicant Is WPA authenticator ( access point ) Implemented key exchange with supplicant ( client ) And WPA3 Is supported. hostapd When wpa_supplicant Both Extensible Authentication Protocol Password (EAP-PWD) When SAE Has the following vulnerabilities: Elliptic curve crypto group (ECC groups) Against SAE Cache-based attacks (SAE Side channel attack ) (CWE-208, CWE-524) - CVE-2019-9494 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to observable timing differences and cache access patterns. SAE confirm Message validation is not performed during processing (CWE-642) - CVE-2019-9496 hostapd Process hostapd/AP When operating in mode SAE confirm Incomplete verification of message processing due to incorrect authentication sequence hostapd The process may end. EAP-PWD Reflection attack (EAP-pwd-Commit Incorrect message validation ) (CWE-301) - CVE-2019-9497 hostapd (EAP Server) And wpa_supplicant (EAP Peer) In EAP-PWD In implementation, EAP-pwd-Commit Message scalar and element values are not validated. EAP-PWD Server In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9498 hostapd (EAP Server) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated. EAP-PWD Peer In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9499 wpa_supplicant (EAP Peer) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated.* A side-channel attack captures information that can be used to recover passwords - CVE-2019-9494 * A weak password is obtained by a dictionary attack - CVE-2019-9495 This attack requires the authority to install and execute applications. hostapd/wpa_supplicant 2.7 And later versions CVE-2019-9494 Is not affected by the timing attack *hostapd Process can be terminated ( Service operation interruption ) - CVE-2019-9496 *EAP-PWD Authentication is bypassed - CVE-2019-9497 Crypto library EC point If a verification process is implemented for an attacker, an attacker cannot acquire or exchange a session key * Illegal scalar / Session key is obtained using message with element value and authentication is bypassed - CVE-2019-9498, CVE-2019-9499. WPA is prone to a security weakness. \nAttackers  can exploit this issue to bypass certain security restrictions to  perform unauthorized actions. This may aid in further attacks. An attacker who can run arbitrary code on a targeted system by persuading a user to either install a malicious application or follow a malicious link could exploit this vulnerability by observing the memory access patterns through the shared cache. A successful exploit could allow the malicious user to use the information gathered  in conjunction with conducting an offline dictionary attack to access the user\u2019s password.  \n\nThe vendor has confirmed the vulnerability and released software updates. ==========================================================================\nUbuntu Security Notice USN-3944-1\nApril 10, 2019\n\nwpa vulnerabilities\n==========================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 18.10\n- Ubuntu 18.04 LTS\n- Ubuntu 16.04 LTS\n- Ubuntu 14.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in wpa_supplicant and hostapd. \n\nSoftware Description:\n- wpa: client support for WPA and WPA2\n\nDetails:\n\nIt was discovered that wpa_supplicant and hostapd were vulnerable to a\nside channel attack against EAP-pwd. A remote attacker could possibly use\nthis issue to recover certain passwords. A\nremote attacker could possibly use this issue to perform a reflection\nattack and authenticate without the appropriate password. (CVE-2019-9497,\nCVE-2019-9498, CVE-2019-9499)\n\nIt was discovered that hostapd incorrectly handled obtaining random\nnumbers. In rare cases where the urandom device isn\u0027t available, it would\nfall back to using a low-quality PRNG. This issue only affected Ubuntu\n14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10743)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 18.10:\n  hostapd                         2:2.6-18ubuntu1.1\n  wpasupplicant                   2:2.6-18ubuntu1.1\n\nUbuntu 18.04 LTS:\n  hostapd                         2:2.6-15ubuntu2.2\n  wpasupplicant                   2:2.6-15ubuntu2.2\n\nUbuntu 16.04 LTS:\n  hostapd                         2.4-0ubuntu6.4\n  wpasupplicant                   2.4-0ubuntu6.4\n\nUbuntu 14.04 LTS:\n  hostapd                         2.1-0ubuntu1.7\n  wpasupplicant                   2.1-0ubuntu1.7\n\nAfter a standard system update you need to reboot your computer to make\nall the necessary changes. \n\nReferences:\n  https://usn.ubuntu.com/usn/usn-3944-1\n  CVE-2016-10743, CVE-2019-9495, CVE-2019-9497, CVE-2019-9498,\n  CVE-2019-9499\n\nPackage Information:\n  https://launchpad.net/ubuntu/+source/wpa/2:2.6-18ubuntu1.1\n  https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.2\n  https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.4\n  https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.7\n. These vulnerability are also collectively\nknown as \"Dragonblood\". \n\nCVE-2019-9495\n\n    Cache-based side-channel attack against the EAP-pwd implementation: an\n    attacker able to run unprivileged code on the target machine (including for\n    example javascript code in a browser on a smartphone) during the handshake\n    could deduce enough information to discover the password in a dictionary\n    attack. \n    This does not result in the attacker being able to derive the session key,\n    complete the following key exchange and access the network. \n\nCVE-2019-9498\n\n    EAP-pwd server missing commit validation for scalar/element: hostapd\n    doesn\u0027t validate values received in the EAP-pwd-Commit message, so an\n    attacker could use a specially crafted commit message to manipulate the\n    exchange in order for hostapd to derive a session key from a limited set of\n    possible values. This could result in an attacker being able to complete\n    authentication and gain access to the network. \n\nCVE-2019-9499\n\n    EAP-pwd peer missing commit validation for scalar/element: wpa_supplicant\n    doesn\u0027t validate values received in the EAP-pwd-Commit message, so an\n    attacker could use a specially crafted commit message to manipulate the\n    exchange in order for wpa_supplicant to derive a session key from a limited\n    set of possible values. This could result in an attacker being able to\n    complete authentication and operate as a rogue AP. \n\nNote that the Dragonblood moniker also applies to CVE-2019-9494 and\nCVE-2014-9496 which are vulnerabilities in the SAE protocol in WPA3. SAE is not\nenabled in Debian stretch builds of wpa, which is thus not vulnerable by default. \n\nDue to the complexity of the backporting process, the fix for these\nvulnerabilities are partial. Users are advised to use strong passwords to\nprevent dictionary attacks or use a 2.7-based version from stretch-backports\n(version above 2:2.7+git20190128+0c1e29f-4). \n\nFor the stable distribution (stretch), these problems have been fixed in\nversion 2:2.4-1+deb9u3. \n\nWe recommend that you upgrade your wpa packages. \n\nFor the detailed security status of wpa please refer to\nits security tracker page at:\nhttps://security-tracker.debian.org/tracker/wpa\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\n\niQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlyu2lQACgkQ3rYcyPpX\nRFtamggAlq8telLPhKzD1+Ns+Pci+Y+WkOAmUpn4XQ0TOmG18sDU1iS2xNHF+buA\nlXVKLp7zgE4VFJsclHAJXtp8anyo7YU99NzUcSF6vboRm3msifL4eE3S7IS9fAaH\n0WWCHwlHMf9IGHqBn9mkwiYySwlId8ps3lvoVV2EOB4wJqa4Y6d4YrqPyFzWop56\njKTlTcJqvQBUFo/y9In/sx8QgONhNwnNAKcrBfiVwn8QHuMRA4c4UJz+NN38ctyt\ndjA/zqT/uXwWhr8Mfl7J+rfdsC5TFPl45qr/gbmB7GRlU2la0dGJv/l0afbINrrG\nNoAgpOeMrwijIdDJ9vG6O3YVV6bIkg==OkO5\n-----END PGP SIGNATURE-----\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n=============================================================================\nFreeBSD-SA-19:03.wpa                                        Security Advisory\n                                                          The FreeBSD Project\n\nTopic:          Multiple vulnerabilities in hostapd and wpa_supplicant\n\nCategory:       contrib\nModule:         wpa\nAnnounced:      2019-05-14\nAffects:        All supported versions of FreeBSD. \nCorrected:      2019-05-01 01:42:38 UTC (stable/12, 12.0-STABLE)\n                2019-05-14 22:57:29 UTC (releng/12.0, 12.0-RELEASE-p4)\n                2019-05-01 01:43:17 UTC (stable/11, 11.2-STABLE)\n                2019-05-14 22:59:32 UTC (releng/11.2, 11.2-RELEASE-p10)\nCVE Name:       CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497,\n                CVE-2019-9498, CVE-2019-9499, CVE-2019-11555\n\nFor general information regarding FreeBSD Security Advisories,\nincluding descriptions of the fields above, security branches, and the\nfollowing sections, please visit \u003cURL:https://security.FreeBSD.org/\u003e. \n\nI.   Background\n\nWi-Fi Protected Access II (WPA2) is a security protocol developed by the\nWi-Fi Alliance to secure wireless computer networks. \n\nhostapd(8) and wpa_supplicant(8) are implementations of user space daemon for\naccess points and wireless client that implements the WPA2 protocol. \n\nII.  Problem Description\n\nMultiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8)\nimplementations.  For more details, please see the reference URLs in the\nReferences section below. \n\nIII. Impact\n\nSecurity of the wireless network may be compromised.  For more details,\nplease see the reference URLS in the References section below. \n\nIV.  Workaround\n\nNo workaround is available, but systems not using hostapd(8) or\nwpa_supplicant(8) are not affected. \n\nV.   Solution\n\nPerform one of the following:\n\n1) Upgrade your vulnerable system to a supported FreeBSD stable or\nrelease / security branch (releng) dated after the correction date. \n\nAfterwards, restart hostapd(8) or wpa_supplicant(8). \n\n2) To update your vulnerable system via a binary patch:\n\nSystems running a RELEASE version of FreeBSD on the i386 or amd64\nplatforms can be updated via the freebsd-update(8) utility:\n\n# freebsd-update fetch\n# freebsd-update install\n\nAfterwards, restart hostapd(8) or wpa_supplicant(8). \n\n3) To update your vulnerable system via a source code patch:\n\nThe following patches have been verified to apply to the applicable\nFreeBSD release branches. \n\na) Download the relevant patch from the location below, and verify the\ndetached PGP signature using your PGP utility. \n\n[FreeBSD 12.0]\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch.asc\n# gpg --verify wpa-12.patch.asc\n\n[FreeBSD 11.2]\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch.asc\n# gpg --verify wpa-11.patch.asc\n\nb) Apply the patch.  Execute the following commands as root:\n\n# cd /usr/src\n# patch \u003c /path/to/patch\n\nc) Recompile the operating system using buildworld and installworld as\ndescribed in \u003cURL:https://www.FreeBSD.org/handbook/makeworld.html\u003e. \n\nRestart the applicable daemons, or reboot the system. \n\nVI.  Correction details\n\nThe following list contains the correction revision numbers for each\naffected branch. \n\nBranch/path                                                      Revision\n- -------------------------------------------------------------------------\nstable/12/                                                        r346980\nreleng/12.0/                                                      r347587\nstable/11/                                                        r346981\nreleng/11.2/                                                      r347588\n- -------------------------------------------------------------------------\n\nTo see which files were modified by a particular revision, run the\nfollowing command, replacing NNNNNN with the revision number, on a\nmachine with Subversion installed:\n\n# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base\n\nOr visit the following URL, replacing NNNNNN with the revision number:\n\n\u003cURL:https://svnweb.freebsd.org/base?view=revision\u0026revision=NNNNNN\u003e\n\nVII. References\n\n\u003cURL:https://w1.fi/security/2019-1\u003e\n\u003cURL:https://w1.fi/security/2019-2\u003e\n\u003cURL:https://w1.fi/security/2019-3\u003e\n\u003cURL:https://w1.fi/security/2019-4\u003e\n\u003cURL:https://w1.fi/security/2019-5\u003e\n\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9494\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9496\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11555\u003e\n\nThe latest revision of this advisory is available at\n\u003cURL:https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc\u003e\n-----BEGIN PGP SIGNATURE-----\n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\nR3lnCzmTd9sg+K6cod2qWWSYdsdEwizcpQDp7M9lRqomiANLqJ4=\n=MXma\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-9495"
      },
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "BID",
        "id": "107866"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160930"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9495"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      }
    ],
    "trust": 3.06
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-9495",
        "trust": 3.2
      },
      {
        "db": "PACKETSTORM",
        "id": "152914",
        "trust": 1.9
      },
      {
        "db": "CERT/CC",
        "id": "VU#871675",
        "trust": 1.7
      },
      {
        "db": "BID",
        "id": "107866",
        "trust": 1.0
      },
      {
        "db": "PACKETSTORM",
        "id": "152481",
        "trust": 0.8
      },
      {
        "db": "JVN",
        "id": "JVNVU94228755",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-569",
        "trust": 0.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.0047",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.4125",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1775",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1258",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2022.0738",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-160930",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9495",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "152477",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160930"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9495"
      },
      {
        "db": "BID",
        "id": "107866"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-569"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9495"
      }
    ]
  },
  "id": "VAR-201904-1560",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160930"
      }
    ],
    "trust": 0.725
  },
  "last_update_date": "2024-11-23T20:43:16.357000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "WPA Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=91383"
      },
      {
        "title": "Ubuntu Security Notice: wpa vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=USN-3944-1"
      },
      {
        "title": "Debian CVElist Bug Report Logs: freeradius: VU#871675: Authentication bypass in EAP-PWD (CVE-2019-11234 CVE-2019-11235)",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=e2dffdfdccbb2784fe652db6e5cddb2c"
      },
      {
        "title": "Debian CVElist Bug Report Logs: src:wpa: multiples vulnerabilities in SAE and EAP-pwd code in wpa",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=39e042d68cbe59a677ae53b8328d282d"
      },
      {
        "title": "Debian Security Advisories: DSA-4430-1 wpa -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=81a56edb299848e0579a7dd950bd73ba"
      },
      {
        "title": "Brocade Security Advisories: BSA-2019-777",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=brocade_security_advisories\u0026qid=9f89054fc8bab7a9de83cce34e487404"
      },
      {
        "title": "Fortinet Security Advisories: Dragonblood vulnerabilities in WiFi WPA3 standard implementation",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=fortinet_security_advisories\u0026qid=FG-IR-19-107"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2019-9495"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-569"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-203",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-524",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-327",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160930"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9495"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.7,
        "url": "https://w1.fi/security/2019-2/"
      },
      {
        "trust": 3.0,
        "url": "http://packetstormsecurity.com/files/152914/freebsd-security-advisory-freebsd-sa-19-03.wpa.html"
      },
      {
        "trust": 2.4,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:03.wpa.asc"
      },
      {
        "trust": 1.8,
        "url": "https://seclists.org/bugtraq/2019/may/40"
      },
      {
        "trust": 1.8,
        "url": "https://www.synology.com/security/advisory/synology_sa_19_16"
      },
      {
        "trust": 1.8,
        "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00030.html"
      },
      {
        "trust": 1.8,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html"
      },
      {
        "trust": 1.7,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9495"
      },
      {
        "trust": 1.6,
        "url": "https://wpa3.mathyvanhoef.com/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-1/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-3/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-4/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/hostapd/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/cgit/hostap/log/"
      },
      {
        "trust": 1.6,
        "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
      },
      {
        "trust": 1.0,
        "url": "https://usn.ubuntu.com/3944-1/"
      },
      {
        "trust": 1.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9498"
      },
      {
        "trust": 1.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9499"
      },
      {
        "trust": 1.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9497"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/svmjofeybgxzlff5iolw67ssopkfejp3/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56obbojjskrtdgexzovfstp4hdsdblae/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/tdozgr3t7fvo5jszwk2qpr7aofiejtiz/"
      },
      {
        "trust": 0.9,
        "url": "http://www.wi-fi.org/index.php"
      },
      {
        "trust": 0.9,
        "url": "https://www.wi-fi.org/news-events/newsroom/wi-fi-alliance-security-update-april-2019"
      },
      {
        "trust": 0.9,
        "url": "https://seclists.org/oss-sec/2019/q2/17"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9494"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9496"
      },
      {
        "trust": 0.8,
        "url": "https://w1.fi/wpa_supplicant/ "
      },
      {
        "trust": 0.8,
        "url": "https://freeradius.org/security/"
      },
      {
        "trust": 0.8,
        "url": "https://en.avm.de/service/current-security-notifications/"
      },
      {
        "trust": 0.8,
        "url": "https://www.lancom-systems.com/service-support/instant-help/general-security-information/"
      },
      {
        "trust": 0.8,
        "url": "https://github.com/openssl/openssl/pull/8750"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56obbojjskrtdgexzovfstp4hdsdblae/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/svmjofeybgxzlff5iolw67ssopkfejp3/"
      },
      {
        "trust": 0.8,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/tdozgr3t7fvo5jszwk2qpr7aofiejtiz/"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9497"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9498"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9499"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9494"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9495"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9496"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu94228755/"
      },
      {
        "trust": 0.8,
        "url": "https://www.kb.cert.org/vuls/id/871675/"
      },
      {
        "trust": 0.8,
        "url": "https://w1.fi/wpa_supplicant/"
      },
      {
        "trust": 0.6,
        "url": "http://www.debian.org/security/2019/dsa-4430"
      },
      {
        "trust": 0.6,
        "url": "https://fortiguard.com/psirt/fg-ir-19-107"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.0047/"
      },
      {
        "trust": 0.6,
        "url": "https://www.securityfocus.com/bid/107866"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2022.0738"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.4125/"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/wpa-supplicant-four-vulnerabilities-29006"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/152481/debian-security-advisory-4430-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/81182"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/78946"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/327.html"
      },
      {
        "trust": 0.1,
        "url": "https://www.rapid7.com/db/vulnerabilities/debian-cve-2019-9495"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://www.kb.cert.org/vuls/id/871675"
      },
      {
        "trust": 0.1,
        "url": "https://tools.cisco.com/security/center/viewalert.x?alertid=59993"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/usn/usn-3944-1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2:2.6-18ubuntu1.1"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2:2.6-15ubuntu2.2"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2.1-0ubuntu1.7"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2016-10743"
      },
      {
        "trust": 0.1,
        "url": "https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.4"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "https://security-tracker.debian.org/tracker/wpa"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11555\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=nnnnnn\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-11.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9494\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9497\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-12.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9499\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-1\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-4\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-5\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-2\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-3\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://www.freebsd.org/handbook/makeworld.html\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-11.patch"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9496\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:03.wpa.asc\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9495\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9498\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-12.patch"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160930"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9495"
      },
      {
        "db": "BID",
        "id": "107866"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-569"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9495"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160930"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9495"
      },
      {
        "db": "BID",
        "id": "107866"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-569"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9495"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-04-12T00:00:00",
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "date": "2019-04-17T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160930"
      },
      {
        "date": "2019-04-17T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9495"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "BID",
        "id": "107866"
      },
      {
        "date": "2019-04-16T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "date": "2019-04-11T14:08:48",
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "date": "2019-04-11T14:10:46",
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "date": "2019-05-15T15:30:08",
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201904-569"
      },
      {
        "date": "2019-04-17T14:29:03.887000",
        "db": "NVD",
        "id": "CVE-2019-9495"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-06-05T00:00:00",
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "date": "2021-11-03T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160930"
      },
      {
        "date": "2019-05-15T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9495"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "BID",
        "id": "107866"
      },
      {
        "date": "2019-12-27T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "date": "2022-02-22T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201904-569"
      },
      {
        "date": "2024-11-21T04:51:43.797000",
        "db": "NVD",
        "id": "CVE-2019-9495"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "PACKETSTORM",
        "id": "152477"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-569"
      }
    ],
    "trust": 0.7
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "WPA3 design issues and implementation vulnerabilities in hostapd and wpa_supplicant",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "encryption problem",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-569"
      }
    ],
    "trust": 0.6
  }
}

    VAR-201904-1552

    Vulnerability from variot - Updated: 2024-11-23 20:11

    The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected. WPA3 Protocol and hostapd When wpa_supplicant There are multiple vulnerabilities in the implementation of, and a remote attacker can obtain weak password information and privileges, as well as disrupt service operations. (DoS) An attack may be carried out. These vulnerabilities "Dragonblood" It is called. CERT/CC Then continue WPA3 The protocol is being verified. Discovered this time WPA3 Vulnerabilities related to the implementation of can be attributed to the protocol specification itself. WPA3 Is a key exchange protocol, Simultaneous Authentication of Equals (SAE) Is adopted. this is "Dragonfly Key Exchange" It is also called WPA2 In Pre-Shared Key (PSK) Acts as a protocol replacement. hostapd Is WPA3 Access point and authentication server daemon is. Also, wpa_supplicant Is WPA authenticator ( access point ) Implemented key exchange with supplicant ( client ) And WPA3 Is supported. SAE confirm Message validation is not performed during processing (CWE-642) - CVE-2019-9496 hostapd Process hostapd/AP When operating in mode SAE confirm Incomplete verification of message processing due to incorrect authentication sequence hostapd The process may end. EAP-PWD Reflection attack (EAP-pwd-Commit Incorrect message validation ) (CWE-301) - CVE-2019-9497 hostapd (EAP Server) And wpa_supplicant (EAP Peer) In EAP-PWD In implementation, EAP-pwd-Commit Message scalar and element values are not validated. EAP-PWD Server In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9498 hostapd (EAP Server) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated. EAP-PWD Peer In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9499 wpa_supplicant (EAP Peer) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated. A side-channel attack captures information that can be used to recover passwords - CVE-2019-9494 * A weak password is obtained by a dictionary attack - CVE-2019-9495 This attack requires the authority to install and execute applications. Memory access pattern analysis is possible by observing the shared cache. hostapd/wpa_supplicant 2.7 And later versions CVE-2019-9494 Is not affected by the timing attack hostapd Process can be terminated ( Service operation interruption ) - CVE-2019-9496 *EAP-PWD Authentication is bypassed - CVE-2019-9497 Crypto library EC point If a verification process is implemented for an attacker, an attacker cannot acquire or exchange a session key * Illegal scalar / Session key is obtained using message with element value and authentication is bypassed - CVE-2019-9498, CVE-2019-9499. WPA3 is prone to a security weakness. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. There is an information disclosure vulnerability in WPA3, which originates from configuration errors in the network system or product during operation. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

    ============================================================================= FreeBSD-SA-19:03.wpa Security Advisory The FreeBSD Project

    Topic: Multiple vulnerabilities in hostapd and wpa_supplicant

    Category: contrib Module: wpa Announced: 2019-05-14 Affects: All supported versions of FreeBSD. Corrected: 2019-05-01 01:42:38 UTC (stable/12, 12.0-STABLE) 2019-05-14 22:57:29 UTC (releng/12.0, 12.0-RELEASE-p4) 2019-05-01 01:43:17 UTC (stable/11, 11.2-STABLE) 2019-05-14 22:59:32 UTC (releng/11.2, 11.2-RELEASE-p10) CVE Name: CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, CVE-2019-11555

    For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit .

    I. Background

    Wi-Fi Protected Access II (WPA2) is a security protocol developed by the Wi-Fi Alliance to secure wireless computer networks.

    hostapd(8) and wpa_supplicant(8) are implementations of user space daemon for access points and wireless client that implements the WPA2 protocol.

    II. Problem Description

    Multiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8) implementations. For more details, please see the reference URLs in the References section below.

    III. Impact

    Security of the wireless network may be compromised. For more details, please see the reference URLS in the References section below.

    IV. Workaround

    No workaround is available, but systems not using hostapd(8) or wpa_supplicant(8) are not affected.

    V. Solution

    Perform one of the following:

    1) Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date.

    Afterwards, restart hostapd(8) or wpa_supplicant(8).

    2) To update your vulnerable system via a binary patch:

    Systems running a RELEASE version of FreeBSD on the i386 or amd64 platforms can be updated via the freebsd-update(8) utility:

    freebsd-update fetch

    freebsd-update install

    Afterwards, restart hostapd(8) or wpa_supplicant(8).

    3) To update your vulnerable system via a source code patch:

    The following patches have been verified to apply to the applicable FreeBSD release branches.

    a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility.

    [FreeBSD 12.0]

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch.asc

    gpg --verify wpa-12.patch.asc

    [FreeBSD 11.2]

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch.asc

    gpg --verify wpa-11.patch.asc

    b) Apply the patch. Execute the following commands as root:

    cd /usr/src

    patch < /path/to/patch

    c) Recompile the operating system using buildworld and installworld as described in .

    Restart the applicable daemons, or reboot the system.

    VI. Correction details

    The following list contains the correction revision numbers for each affected branch.

    Branch/path Revision

    stable/12/ r346980 releng/12.0/ r347587 stable/11/ r346981 releng/11.2/ r347588

    To see which files were modified by a particular revision, run the following command, replacing NNNNNN with the revision number, on a machine with Subversion installed:

    svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

    Or visit the following URL, replacing NNNNNN with the revision number:

    VII. References

    The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlzbTrVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n 5cLsaA/9EB577JYdYdwFCOQ6TiOVhyluLJzgrhG3aiXeBntj8ytkRjcXKnP0aega 3G2R1do7pixVYUF52OWJwaNO3Hm+LHMngiOqujcLI+49ISI3T/APaU/D2dqmXVb8 nN/Pd+0HDGj3R3MwyyHT8/3fX0pJ395vcQhYb61M6PUSrwr8uiBbILT57iCadZoL F4KOCvRv7I4EFWXvqngGfeohZbbeHPBga2DwuebWR/E/1uWrMKEOF2pvh4b6ZSN2 pdr7ZHMiL1cZt+p+2gwWoqDWyD93u2lTC7Gmo3Vom+meH7eaQ79obXEN541aiQ04 CYhjkwuW5uNGUWCO/Xsfn5gqICeB1G5A/aBHQlAyVgUGia8jukL1jn3ga4AQgKrN h9aTmvrQs17PjMVtq81ZS0xm0ztW0Y6t2A9fRgGcnOOw+uy5tHMbJaKSMy8x97NT gUyXtoyu47tjjMrzsQcma2t6/+iCEDuW1P1LybSmv/v59gro9uveCdl0busgM9GS M5bpWK/qYQS1HYmYeTKMRynmD8ntRbflYoUP/SpijHsz+56rgyeJO12WyltyT32f j5fgnKaznW/UPtgmK0wnPIG9XEj3Nzs4C4cypO5t8OiuLEli4wRdb6MYlvEjq4la R3lnCzmTd9sg+K6cod2qWWSYdsdEwizcpQDp7M9lRqomiANLqJ4= =MXma -----END PGP SIGNATURE-----

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201904-1552",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "28"
      },
      {
        "model": "router manager",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "synology",
        "version": "1.2.3-8087"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "30"
      },
      {
        "model": "backports sle",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.0"
      },
      {
        "model": "hostapd",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.7"
      },
      {
        "model": "wpa supplicant",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.7"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "12.0"
      },
      {
        "model": "radius server",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "synology",
        "version": "3.0"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "29"
      },
      {
        "model": "freebsd",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "freebsd",
        "version": "11.2"
      },
      {
        "model": "leap",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "opensuse",
        "version": "15.1"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "broadcom",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "freeradius",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "",
        "scope": null,
        "trust": 0.8,
        "vendor": "multiple vendors",
        "version": null
      },
      {
        "model": "alliance wpa3 (wi-fi protected access",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "wi fi",
        "version": "3)0"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7.1"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.7"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.6"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.5"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.4"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.3"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.2"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.1"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.0"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.7"
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.0.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7.3"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.3"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "2.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.6.3"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.6"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.3"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.4.0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.7"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.5"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.3"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.3.0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.2.4"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.2.2"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.2.1"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 f1",
        "version": "0.2.0"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "BID",
        "id": "107864"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9494"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:misc:multiple_vendors",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Mathy Vanhoef (New York University Abu Dhabi) and Eyal Ronen (Tel Aviv University),security.freebsd.org",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-567"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2019-9494",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2019-9494",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 1.1,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Medium",
            "accessVector": "Adjacent Network",
            "authentication": "Single",
            "author": "JPCERT/CC",
            "availabilityImpact": "Partial",
            "baseScore": 7.0,
            "confidentialityImpact": "Complete",
            "exploitabilityScore": null,
            "id": "JVNDB-2019-002625",
            "impactScore": null,
            "integrityImpact": "Complete",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "VHN-160929",
            "impactScore": 2.9,
            "integrityImpact": "NONE",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:P/I:N/A:N",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.2,
            "id": "CVE-2019-9494",
            "impactScore": 3.6,
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "High",
            "attackVector": "Adjacent Network",
            "author": "JPCERT/CC",
            "availabilityImpact": "Low",
            "baseScore": 6.7,
            "baseSeverity": "Medium",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "JVNDB-2019-002625",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2019-9494",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "JPCERT/CC",
            "id": "JVNDB-2019-002625",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201904-567",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-160929",
            "trust": 0.1,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2019-9494",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160929"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9494"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-567"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9494"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns. An attacker may be able to gain leaked information from a side channel attack that can be used for full password recovery. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.7 are affected. WPA3 Protocol and hostapd When wpa_supplicant There are multiple vulnerabilities in the implementation of, and a remote attacker can obtain weak password information and privileges, as well as disrupt service operations. (DoS) An attack may be carried out. These vulnerabilities \"Dragonblood\" It is called. CERT/CC Then continue WPA3 The protocol is being verified. Discovered this time WPA3 Vulnerabilities related to the implementation of can be attributed to the protocol specification itself. WPA3 Is a key exchange protocol, Simultaneous Authentication of Equals (SAE) Is adopted. this is \"Dragonfly Key Exchange\" It is also called WPA2 In Pre-Shared Key (PSK) Acts as a protocol replacement. hostapd Is WPA3 Access point and authentication server daemon is. Also, wpa_supplicant Is WPA authenticator ( access point ) Implemented key exchange with supplicant ( client ) And WPA3 Is supported. SAE confirm Message validation is not performed during processing (CWE-642) - CVE-2019-9496 hostapd Process hostapd/AP When operating in mode SAE confirm Incomplete verification of message processing due to incorrect authentication sequence hostapd The process may end. EAP-PWD Reflection attack (EAP-pwd-Commit Incorrect message validation ) (CWE-301) - CVE-2019-9497 hostapd (EAP Server) And wpa_supplicant (EAP Peer) In EAP-PWD In implementation, EAP-pwd-Commit Message scalar and element values are not validated. EAP-PWD Server In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9498 hostapd (EAP Server) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated. EAP-PWD Peer In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9499 wpa_supplicant (EAP Peer) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated.* A side-channel attack captures information that can be used to recover passwords - CVE-2019-9494 * A weak password is obtained by a dictionary attack - CVE-2019-9495 This attack requires the authority to install and execute applications. Memory access pattern analysis is possible by observing the shared cache. hostapd/wpa_supplicant 2.7 And later versions CVE-2019-9494 Is not affected by the timing attack *hostapd Process can be terminated ( Service operation interruption ) - CVE-2019-9496 *EAP-PWD Authentication is bypassed - CVE-2019-9497 Crypto library EC point If a verification process is implemented for an attacker, an attacker cannot acquire or exchange a session key * Illegal scalar / Session key is obtained using message with element value and authentication is bypassed - CVE-2019-9498, CVE-2019-9499. WPA3 is prone to a security weakness. \nAttackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. There is an information disclosure vulnerability in WPA3, which originates from configuration errors in the network system or product during operation. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n=============================================================================\nFreeBSD-SA-19:03.wpa                                        Security Advisory\n                                                          The FreeBSD Project\n\nTopic:          Multiple vulnerabilities in hostapd and wpa_supplicant\n\nCategory:       contrib\nModule:         wpa\nAnnounced:      2019-05-14\nAffects:        All supported versions of FreeBSD. \nCorrected:      2019-05-01 01:42:38 UTC (stable/12, 12.0-STABLE)\n                2019-05-14 22:57:29 UTC (releng/12.0, 12.0-RELEASE-p4)\n                2019-05-01 01:43:17 UTC (stable/11, 11.2-STABLE)\n                2019-05-14 22:59:32 UTC (releng/11.2, 11.2-RELEASE-p10)\nCVE Name:       CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497,\n                CVE-2019-9498, CVE-2019-9499, CVE-2019-11555\n\nFor general information regarding FreeBSD Security Advisories,\nincluding descriptions of the fields above, security branches, and the\nfollowing sections, please visit \u003cURL:https://security.FreeBSD.org/\u003e. \n\nI.   Background\n\nWi-Fi Protected Access II (WPA2) is a security protocol developed by the\nWi-Fi Alliance to secure wireless computer networks. \n\nhostapd(8) and wpa_supplicant(8) are implementations of user space daemon for\naccess points and wireless client that implements the WPA2 protocol. \n\nII.  Problem Description\n\nMultiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8)\nimplementations.  For more details, please see the reference URLs in the\nReferences section below. \n\nIII. Impact\n\nSecurity of the wireless network may be compromised.  For more details,\nplease see the reference URLS in the References section below. \n\nIV.  Workaround\n\nNo workaround is available, but systems not using hostapd(8) or\nwpa_supplicant(8) are not affected. \n\nV.   Solution\n\nPerform one of the following:\n\n1) Upgrade your vulnerable system to a supported FreeBSD stable or\nrelease / security branch (releng) dated after the correction date. \n\nAfterwards, restart hostapd(8) or wpa_supplicant(8). \n\n2) To update your vulnerable system via a binary patch:\n\nSystems running a RELEASE version of FreeBSD on the i386 or amd64\nplatforms can be updated via the freebsd-update(8) utility:\n\n# freebsd-update fetch\n# freebsd-update install\n\nAfterwards, restart hostapd(8) or wpa_supplicant(8). \n\n3) To update your vulnerable system via a source code patch:\n\nThe following patches have been verified to apply to the applicable\nFreeBSD release branches. \n\na) Download the relevant patch from the location below, and verify the\ndetached PGP signature using your PGP utility. \n\n[FreeBSD 12.0]\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch.asc\n# gpg --verify wpa-12.patch.asc\n\n[FreeBSD 11.2]\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch.asc\n# gpg --verify wpa-11.patch.asc\n\nb) Apply the patch.  Execute the following commands as root:\n\n# cd /usr/src\n# patch \u003c /path/to/patch\n\nc) Recompile the operating system using buildworld and installworld as\ndescribed in \u003cURL:https://www.FreeBSD.org/handbook/makeworld.html\u003e. \n\nRestart the applicable daemons, or reboot the system. \n\nVI.  Correction details\n\nThe following list contains the correction revision numbers for each\naffected branch. \n\nBranch/path                                                      Revision\n- -------------------------------------------------------------------------\nstable/12/                                                        r346980\nreleng/12.0/                                                      r347587\nstable/11/                                                        r346981\nreleng/11.2/                                                      r347588\n- -------------------------------------------------------------------------\n\nTo see which files were modified by a particular revision, run the\nfollowing command, replacing NNNNNN with the revision number, on a\nmachine with Subversion installed:\n\n# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base\n\nOr visit the following URL, replacing NNNNNN with the revision number:\n\n\u003cURL:https://svnweb.freebsd.org/base?view=revision\u0026revision=NNNNNN\u003e\n\nVII. References\n\n\u003cURL:https://w1.fi/security/2019-1\u003e\n\u003cURL:https://w1.fi/security/2019-2\u003e\n\u003cURL:https://w1.fi/security/2019-3\u003e\n\u003cURL:https://w1.fi/security/2019-4\u003e\n\u003cURL:https://w1.fi/security/2019-5\u003e\n\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9494\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9496\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11555\u003e\n\nThe latest revision of this advisory is available at\n\u003cURL:https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc\u003e\n-----BEGIN PGP SIGNATURE-----\n\niQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlzbTrVfFIAAAAAALgAo\naXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD\nMEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n\n5cLsaA/9EB577JYdYdwFCOQ6TiOVhyluLJzgrhG3aiXeBntj8ytkRjcXKnP0aega\n3G2R1do7pixVYUF52OWJwaNO3Hm+LHMngiOqujcLI+49ISI3T/APaU/D2dqmXVb8\nnN/Pd+0HDGj3R3MwyyHT8/3fX0pJ395vcQhYb61M6PUSrwr8uiBbILT57iCadZoL\nF4KOCvRv7I4EFWXvqngGfeohZbbeHPBga2DwuebWR/E/1uWrMKEOF2pvh4b6ZSN2\npdr7ZHMiL1cZt+p+2gwWoqDWyD93u2lTC7Gmo3Vom+meH7eaQ79obXEN541aiQ04\nCYhjkwuW5uNGUWCO/Xsfn5gqICeB1G5A/aBHQlAyVgUGia8jukL1jn3ga4AQgKrN\nh9aTmvrQs17PjMVtq81ZS0xm0ztW0Y6t2A9fRgGcnOOw+uy5tHMbJaKSMy8x97NT\ngUyXtoyu47tjjMrzsQcma2t6/+iCEDuW1P1LybSmv/v59gro9uveCdl0busgM9GS\nM5bpWK/qYQS1HYmYeTKMRynmD8ntRbflYoUP/SpijHsz+56rgyeJO12WyltyT32f\nj5fgnKaznW/UPtgmK0wnPIG9XEj3Nzs4C4cypO5t8OiuLEli4wRdb6MYlvEjq4la\nR3lnCzmTd9sg+K6cod2qWWSYdsdEwizcpQDp7M9lRqomiANLqJ4=\n=MXma\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-9494"
      },
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "BID",
        "id": "107864"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160929"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9494"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      }
    ],
    "trust": 2.88
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-160929",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160929"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-9494",
        "trust": 3.0
      },
      {
        "db": "PACKETSTORM",
        "id": "152914",
        "trust": 1.9
      },
      {
        "db": "CERT/CC",
        "id": "VU#871675",
        "trust": 1.7
      },
      {
        "db": "BID",
        "id": "107864",
        "trust": 1.0
      },
      {
        "db": "JVN",
        "id": "JVNVU94228755",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-567",
        "trust": 0.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.0047",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1258",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2022.0738",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.4125",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1775",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-160929",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9494",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160929"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9494"
      },
      {
        "db": "BID",
        "id": "107864"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-567"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9494"
      }
    ]
  },
  "id": "VAR-201904-1552",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160929"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2024-11-23T20:11:48.255000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "WPA Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=91382"
      },
      {
        "title": "Debian CVElist Bug Report Logs: freeradius: VU#871675: Authentication bypass in EAP-PWD (CVE-2019-11234 CVE-2019-11235)",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=e2dffdfdccbb2784fe652db6e5cddb2c"
      },
      {
        "title": "Debian Security Advisories: DSA-4430-1 wpa -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=81a56edb299848e0579a7dd950bd73ba"
      },
      {
        "title": "Debian CVElist Bug Report Logs: src:wpa: multiples vulnerabilities in SAE and EAP-pwd code in wpa",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=39e042d68cbe59a677ae53b8328d282d"
      },
      {
        "title": "PoC in GitHub",
        "trust": 0.1,
        "url": "https://github.com/nomi-sec/PoC-in-GitHub "
      },
      {
        "title": "PoC in GitHub",
        "trust": 0.1,
        "url": "https://github.com/manas3c/CVE-POC "
      },
      {
        "title": "The Register",
        "trust": 0.1,
        "url": "https://www.theregister.co.uk/2019/04/11/bughunters_punch_holes_in_wpa3_wifi_security/"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2019-9494"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-567"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-203",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-524",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-208",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-200",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-160929"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9494"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.7,
        "url": "https://w1.fi/security/2019-1/"
      },
      {
        "trust": 3.0,
        "url": "http://packetstormsecurity.com/files/152914/freebsd-security-advisory-freebsd-sa-19-03.wpa.html"
      },
      {
        "trust": 2.5,
        "url": "https://wpa3.mathyvanhoef.com/"
      },
      {
        "trust": 2.5,
        "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
      },
      {
        "trust": 2.4,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:03.wpa.asc"
      },
      {
        "trust": 1.8,
        "url": "https://seclists.org/bugtraq/2019/may/40"
      },
      {
        "trust": 1.8,
        "url": "https://www.synology.com/security/advisory/synology_sa_19_16"
      },
      {
        "trust": 1.8,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-2/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-3/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-4/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/hostapd/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/cgit/hostap/log/"
      },
      {
        "trust": 1.5,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9494"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56obbojjskrtdgexzovfstp4hdsdblae/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/tdozgr3t7fvo5jszwk2qpr7aofiejtiz/"
      },
      {
        "trust": 1.1,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/svmjofeybgxzlff5iolw67ssopkfejp3/"
      },
      {
        "trust": 0.9,
        "url": "https://seclists.org/oss-sec/2019/q2/16"
      },
      {
        "trust": 0.9,
        "url": "https://github.com/vanhoefm/dragonforce"
      },
      {
        "trust": 0.9,
        "url": "https://github.com/vanhoefm/dragonslayer"
      },
      {
        "trust": 0.9,
        "url": "http://www.wi-fi.org/index.php"
      },
      {
        "trust": 0.9,
        "url": "https://www.wi-fi.org/news-events/newsroom/wi-fi-alliance-security-update-april-2019"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9495"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9496"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9497"
      },
      {
        "trust": 0.8,
        "url": "https://w1.fi/wpa_supplicant/ "
      },
      {
        "trust": 0.8,
        "url": "https://freeradius.org/security/"
      },
      {
        "trust": 0.8,
        "url": "https://en.avm.de/service/current-security-notifications/"
      },
      {
        "trust": 0.8,
        "url": "https://www.lancom-systems.com/service-support/instant-help/general-security-information/"
      },
      {
        "trust": 0.8,
        "url": "https://github.com/openssl/openssl/pull/8750"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9497"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9498"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9499"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9494"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9495"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9496"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu94228755/"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9498"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9499"
      },
      {
        "trust": 0.8,
        "url": "https://www.kb.cert.org/vuls/id/871675/"
      },
      {
        "trust": 0.8,
        "url": "https://w1.fi/wpa_supplicant/"
      },
      {
        "trust": 0.7,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56obbojjskrtdgexzovfstp4hdsdblae/"
      },
      {
        "trust": 0.7,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/svmjofeybgxzlff5iolw67ssopkfejp3/"
      },
      {
        "trust": 0.7,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/tdozgr3t7fvo5jszwk2qpr7aofiejtiz/"
      },
      {
        "trust": 0.6,
        "url": "http://www.debian.org/security/2019/dsa-4430"
      },
      {
        "trust": 0.6,
        "url": "https://fortiguard.com/psirt/fg-ir-19-107"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.0047/"
      },
      {
        "trust": 0.6,
        "url": "https://www.securityfocus.com/bid/107864"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2022.0738"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.4125/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/81182"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/78946"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.1775/"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/203.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://www.theregister.co.uk/2019/04/11/bughunters_punch_holes_in_wpa3_wifi_security/"
      },
      {
        "trust": 0.1,
        "url": "https://www.kb.cert.org/vuls/id/871675"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11555\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=nnnnnn\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-11.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9494\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9497\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-12.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9499\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-1\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-4\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-5\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-2\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-3\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://www.freebsd.org/handbook/makeworld.html\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-11.patch"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9496\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:03.wpa.asc\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9495\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9498\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-12.patch"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160929"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9494"
      },
      {
        "db": "BID",
        "id": "107864"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-567"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9494"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULHUB",
        "id": "VHN-160929"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9494"
      },
      {
        "db": "BID",
        "id": "107864"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-567"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9494"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-04-12T00:00:00",
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "date": "2019-04-17T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160929"
      },
      {
        "date": "2019-04-17T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9494"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "BID",
        "id": "107864"
      },
      {
        "date": "2019-04-16T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "date": "2019-05-15T15:30:08",
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201904-567"
      },
      {
        "date": "2019-04-17T14:29:03.840000",
        "db": "NVD",
        "id": "CVE-2019-9494"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-06-05T00:00:00",
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "date": "2021-11-03T00:00:00",
        "db": "VULHUB",
        "id": "VHN-160929"
      },
      {
        "date": "2023-11-07T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9494"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "BID",
        "id": "107864"
      },
      {
        "date": "2019-12-27T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "date": "2022-02-22T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201904-567"
      },
      {
        "date": "2024-11-21T04:51:43.657000",
        "db": "NVD",
        "id": "CVE-2019-9494"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-567"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "WPA3 design issues and implementation vulnerabilities in hostapd and wpa_supplicant",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "information disclosure",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-567"
      }
    ],
    "trust": 0.6
  }
}

    VAR-201904-0380

    Vulnerability from variot - Updated: 2024-11-23 19:47

    The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. WPA3 Protocol and hostapd When wpa_supplicant There are multiple vulnerabilities in the implementation of, and a remote attacker can obtain weak password information and privileges, as well as disrupt service operations. (DoS) An attack may be carried out. These vulnerabilities "Dragonblood" It is called. CERT/CC Then continue WPA3 The protocol is being verified. Discovered this time WPA3 Vulnerabilities related to the implementation of can be attributed to the protocol specification itself. WPA3 Is a key exchange protocol, Simultaneous Authentication of Equals (SAE) Is adopted. this is "Dragonfly Key Exchange" It is also called WPA2 In Pre-Shared Key (PSK) Acts as a protocol replacement. hostapd Is WPA3 Access point and authentication server daemon is. Also, wpa_supplicant Is WPA authenticator ( access point ) Implemented key exchange with supplicant ( client ) And WPA3 Is supported. hostapd When wpa_supplicant Both Extensible Authentication Protocol Password (EAP-PWD) When SAE Has the following vulnerabilities: Elliptic curve crypto group (ECC groups) Against SAE Cache-based attacks (SAE Side channel attack ) (CWE-208, CWE-524) - CVE-2019-9494 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to observable timing differences and cache access patterns. Elliptic curve crypto group (ECC groups) Against EAP-PWD Cache-based attack (EAP-PWD Side channel attack ) (CWE-524) - CVE-2019-9495 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to cache access patterns. SAE confirm Message validation is not performed during processing (CWE-642) - CVE-2019-9496 hostapd Process hostapd/AP When operating in mode SAE confirm Incomplete verification of message processing due to incorrect authentication sequence hostapd The process may end. EAP-PWD Peer In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9499 wpa_supplicant (EAP Peer) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated.* A side-channel attack captures information that can be used to recover passwords - CVE-2019-9494 * A weak password is obtained by a dictionary attack - CVE-2019-9495 This attack requires the authority to install and execute applications. Memory access pattern analysis is possible by observing the shared cache. WPA is prone to multiple security weaknesses. Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. These vulnerability are also collectively known as "Dragonblood".

    CVE-2019-9495

    Cache-based side-channel attack against the EAP-pwd implementation: an
attacker able to run unprivileged code on the target machine (including for
example javascript code in a browser on a smartphone) during the handshake
could deduce enough information to discover the password in a dictionary
attack.

    CVE-2019-9498

    EAP-pwd server missing commit validation for scalar/element: hostapd
doesn't validate values received in the EAP-pwd-Commit message, so an
attacker could use a specially crafted commit message to manipulate the
exchange in order for hostapd to derive a session key from a limited set of
possible values.

    CVE-2019-9499

    EAP-pwd peer missing commit validation for scalar/element: wpa_supplicant
doesn't validate values received in the EAP-pwd-Commit message, so an
attacker could use a specially crafted commit message to manipulate the
exchange in order for wpa_supplicant to derive a session key from a limited
set of possible values.

    Note that the Dragonblood moniker also applies to CVE-2019-9494 and CVE-2014-9496 which are vulnerabilities in the SAE protocol in WPA3. SAE is not enabled in Debian stretch builds of wpa, which is thus not vulnerable by default.

    Due to the complexity of the backporting process, the fix for these vulnerabilities are partial. Users are advised to use strong passwords to prevent dictionary attacks or use a 2.7-based version from stretch-backports (version above 2:2.7+git20190128+0c1e29f-4).

    For the stable distribution (stretch), these problems have been fixed in version 2:2.4-1+deb9u3.

    We recommend that you upgrade your wpa packages.

    For the detailed security status of wpa please refer to its security tracker page at: https://security-tracker.debian.org/tracker/wpa

    Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlyu2lQACgkQ3rYcyPpX RFtamggAlq8telLPhKzD1+Ns+Pci+Y+WkOAmUpn4XQ0TOmG18sDU1iS2xNHF+buA lXVKLp7zgE4VFJsclHAJXtp8anyo7YU99NzUcSF6vboRm3msifL4eE3S7IS9fAaH 0WWCHwlHMf9IGHqBn9mkwiYySwlId8ps3lvoVV2EOB4wJqa4Y6d4YrqPyFzWop56 jKTlTcJqvQBUFo/y9In/sx8QgONhNwnNAKcrBfiVwn8QHuMRA4c4UJz+NN38ctyt djA/zqT/uXwWhr8Mfl7J+rfdsC5TFPl45qr/gbmB7GRlU2la0dGJv/l0afbINrrG NoAgpOeMrwijIdDJ9vG6O3YVV6bIkg==OkO5 -----END PGP SIGNATURE----- . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

    ============================================================================= FreeBSD-SA-19:03.wpa Security Advisory The FreeBSD Project

    Topic: Multiple vulnerabilities in hostapd and wpa_supplicant

    Category: contrib Module: wpa Announced: 2019-05-14 Affects: All supported versions of FreeBSD. Corrected: 2019-05-01 01:42:38 UTC (stable/12, 12.0-STABLE) 2019-05-14 22:57:29 UTC (releng/12.0, 12.0-RELEASE-p4) 2019-05-01 01:43:17 UTC (stable/11, 11.2-STABLE) 2019-05-14 22:59:32 UTC (releng/11.2, 11.2-RELEASE-p10) CVE Name: CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497, CVE-2019-9498, CVE-2019-9499, CVE-2019-11555

    For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit .

    I. Background

    Wi-Fi Protected Access II (WPA2) is a security protocol developed by the Wi-Fi Alliance to secure wireless computer networks.

    hostapd(8) and wpa_supplicant(8) are implementations of user space daemon for access points and wireless client that implements the WPA2 protocol.

    II. Problem Description

    Multiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8) implementations. For more details, please see the reference URLs in the References section below.

    III. Impact

    Security of the wireless network may be compromised. For more details, please see the reference URLS in the References section below.

    IV. Workaround

    No workaround is available, but systems not using hostapd(8) or wpa_supplicant(8) are not affected.

    V. Solution

    Perform one of the following:

    1) Upgrade your vulnerable system to a supported FreeBSD stable or release / security branch (releng) dated after the correction date.

    Afterwards, restart hostapd(8) or wpa_supplicant(8).

    2) To update your vulnerable system via a binary patch:

    Systems running a RELEASE version of FreeBSD on the i386 or amd64 platforms can be updated via the freebsd-update(8) utility:

    freebsd-update fetch

    freebsd-update install

    Afterwards, restart hostapd(8) or wpa_supplicant(8).

    3) To update your vulnerable system via a source code patch:

    The following patches have been verified to apply to the applicable FreeBSD release branches.

    a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility.

    [FreeBSD 12.0]

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch.asc

    gpg --verify wpa-12.patch.asc

    [FreeBSD 11.2]

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch

    fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch.asc

    gpg --verify wpa-11.patch.asc

    b) Apply the patch. Execute the following commands as root:

    cd /usr/src

    patch < /path/to/patch

    c) Recompile the operating system using buildworld and installworld as described in .

    Restart the applicable daemons, or reboot the system.

    VI. Correction details

    The following list contains the correction revision numbers for each affected branch.

    Branch/path Revision

    stable/12/ r346980 releng/12.0/ r347587 stable/11/ r346981 releng/11.2/ r347588

    To see which files were modified by a particular revision, run the following command, replacing NNNNNN with the revision number, on a machine with Subversion installed:

    svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base

    Or visit the following URL, replacing NNNNNN with the revision number:

    VII. References

    The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlzbTrVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n 5cLsaA/9EB577JYdYdwFCOQ6TiOVhyluLJzgrhG3aiXeBntj8ytkRjcXKnP0aega 3G2R1do7pixVYUF52OWJwaNO3Hm+LHMngiOqujcLI+49ISI3T/APaU/D2dqmXVb8 nN/Pd+0HDGj3R3MwyyHT8/3fX0pJ395vcQhYb61M6PUSrwr8uiBbILT57iCadZoL F4KOCvRv7I4EFWXvqngGfeohZbbeHPBga2DwuebWR/E/1uWrMKEOF2pvh4b6ZSN2 pdr7ZHMiL1cZt+p+2gwWoqDWyD93u2lTC7Gmo3Vom+meH7eaQ79obXEN541aiQ04 CYhjkwuW5uNGUWCO/Xsfn5gqICeB1G5A/aBHQlAyVgUGia8jukL1jn3ga4AQgKrN h9aTmvrQs17PjMVtq81ZS0xm0ztW0Y6t2A9fRgGcnOOw+uy5tHMbJaKSMy8x97NT gUyXtoyu47tjjMrzsQcma2t6/+iCEDuW1P1LybSmv/v59gro9uveCdl0busgM9GS M5bpWK/qYQS1HYmYeTKMRynmD8ntRbflYoUP/SpijHsz+56rgyeJO12WyltyT32f j5fgnKaznW/UPtgmK0wnPIG9XEj3Nzs4C4cypO5t8OiuLEli4wRdb6MYlvEjq4la R3lnCzmTd9sg+K6cod2qWWSYdsdEwizcpQDp7M9lRqomiANLqJ4= =MXma -----END PGP SIGNATURE-----

    Show details on source website
    To clipboard 

    {
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201904-0380",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "28"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "30"
      },
      {
        "model": "hostapd",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.7"
      },
      {
        "model": "hostapd",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.4"
      },
      {
        "model": "wpa supplicant",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.7"
      },
      {
        "model": "hostapd",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.5"
      },
      {
        "model": "wpa supplicant",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.4"
      },
      {
        "model": "fedora",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fedoraproject",
        "version": "29"
      },
      {
        "model": "wpa supplicant",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "w1 fi",
        "version": "2.5"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "broadcom",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "freeradius",
        "version": null
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "synology",
        "version": null
      },
      {
        "model": "",
        "scope": null,
        "trust": 0.8,
        "vendor": "multiple vendors",
        "version": null
      },
      {
        "model": "wpa supplicant",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 fi",
        "version": "0"
      },
      {
        "model": "hostapd",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "w1 fi",
        "version": "0"
      },
      {
        "model": "linux",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "18.10"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "18.04"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "16.04"
      },
      {
        "model": "linux lts",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "ubuntu",
        "version": "14.04"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9497"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:misc:multiple_vendors",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Debian,security.freebsd.org",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-575"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2019-9497",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2019-9497",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.1,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Medium",
            "accessVector": "Adjacent Network",
            "authentication": "Single",
            "author": "JPCERT/CC",
            "availabilityImpact": "Partial",
            "baseScore": 7.0,
            "confidentialityImpact": "Complete",
            "exploitabilityScore": null,
            "id": "JVNDB-2019-002625",
            "impactScore": null,
            "integrityImpact": "Complete",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:A/AC:M/Au:S/C:C/I:C/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.2,
            "id": "CVE-2019-9497",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          {
            "attackComplexity": "High",
            "attackVector": "Adjacent Network",
            "author": "JPCERT/CC",
            "availabilityImpact": "Low",
            "baseScore": 6.7,
            "baseSeverity": "Medium",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "JVNDB-2019-002625",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2019-9497",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "JPCERT/CC",
            "id": "JVNDB-2019-002625",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201904-575",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2019-9497",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2019-9497"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-575"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9497"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The implementations of EAP-PWD in hostapd EAP Server and wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit. This vulnerability may allow an attacker to complete EAP-PWD authentication without knowing the password. However, unless the crypto library does not implement additional checks for the EC point, the attacker will not be able to derive the session key or complete the key exchange. Both hostapd with SAE support and wpa_supplicant with SAE support prior to and including version 2.4 are affected. Both hostapd with EAP-pwd support and wpa_supplicant with EAP-pwd support prior to and including version 2.7 are affected. WPA3 Protocol and hostapd When wpa_supplicant There are multiple vulnerabilities in the implementation of, and a remote attacker can obtain weak password information and privileges, as well as disrupt service operations. (DoS) An attack may be carried out. These vulnerabilities \"Dragonblood\" It is called. CERT/CC Then continue WPA3 The protocol is being verified. Discovered this time WPA3 Vulnerabilities related to the implementation of can be attributed to the protocol specification itself. WPA3 Is a key exchange protocol, Simultaneous Authentication of Equals (SAE) Is adopted. this is \"Dragonfly Key Exchange\" It is also called WPA2 In Pre-Shared Key (PSK) Acts as a protocol replacement. hostapd Is WPA3 Access point and authentication server daemon is. Also, wpa_supplicant Is WPA authenticator ( access point ) Implemented key exchange with supplicant ( client ) And WPA3 Is supported. hostapd When wpa_supplicant Both Extensible Authentication Protocol Password (EAP-PWD) When SAE Has the following vulnerabilities: Elliptic curve crypto group (ECC groups) Against SAE Cache-based attacks (SAE Side channel attack ) (CWE-208, CWE-524) - CVE-2019-9494 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to observable timing differences and cache access patterns. Elliptic curve crypto group (ECC groups) Against EAP-PWD Cache-based attack (EAP-PWD Side channel attack ) (CWE-524) - CVE-2019-9495 hostapd When wpa_supplicant In SAE The implementation is vulnerable to side-channel attacks due to cache access patterns. SAE confirm Message validation is not performed during processing (CWE-642) - CVE-2019-9496 hostapd Process hostapd/AP When operating in mode SAE confirm Incomplete verification of message processing due to incorrect authentication sequence hostapd The process may end. EAP-PWD Peer In EAP-pwd-Commit Incorrect message validation (CWE-346) - CVE-2019-9499 wpa_supplicant (EAP Peer) In EAP-PWD In the implementation, the cryptographic library used for the build is EAP-pwd-Commit Message element value (EC point) If you do not implement the verification process for EAP-pwd-Commit Message scalar and element values are not validated.* A side-channel attack captures information that can be used to recover passwords - CVE-2019-9494 * A weak password is obtained by a dictionary attack - CVE-2019-9495 This attack requires the authority to install and execute applications. Memory access pattern analysis is possible by observing the shared cache. WPA is prone to multiple security weaknesses. \nAttackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks. These vulnerability are also collectively\nknown as \"Dragonblood\". \n\nCVE-2019-9495\n\n    Cache-based side-channel attack against the EAP-pwd implementation: an\n    attacker able to run unprivileged code on the target machine (including for\n    example javascript code in a browser on a smartphone) during the handshake\n    could deduce enough information to discover the password in a dictionary\n    attack. \n\nCVE-2019-9498\n\n    EAP-pwd server missing commit validation for scalar/element: hostapd\n    doesn\u0027t validate values received in the EAP-pwd-Commit message, so an\n    attacker could use a specially crafted commit message to manipulate the\n    exchange in order for hostapd to derive a session key from a limited set of\n    possible values. \n\nCVE-2019-9499\n\n    EAP-pwd peer missing commit validation for scalar/element: wpa_supplicant\n    doesn\u0027t validate values received in the EAP-pwd-Commit message, so an\n    attacker could use a specially crafted commit message to manipulate the\n    exchange in order for wpa_supplicant to derive a session key from a limited\n    set of possible values. \n\nNote that the Dragonblood moniker also applies to CVE-2019-9494 and\nCVE-2014-9496 which are vulnerabilities in the SAE protocol in WPA3. SAE is not\nenabled in Debian stretch builds of wpa, which is thus not vulnerable by default. \n\nDue to the complexity of the backporting process, the fix for these\nvulnerabilities are partial. Users are advised to use strong passwords to\nprevent dictionary attacks or use a 2.7-based version from stretch-backports\n(version above 2:2.7+git20190128+0c1e29f-4). \n\nFor the stable distribution (stretch), these problems have been fixed in\nversion 2:2.4-1+deb9u3. \n\nWe recommend that you upgrade your wpa packages. \n\nFor the detailed security status of wpa please refer to\nits security tracker page at:\nhttps://security-tracker.debian.org/tracker/wpa\n\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\n\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----\n\niQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlyu2lQACgkQ3rYcyPpX\nRFtamggAlq8telLPhKzD1+Ns+Pci+Y+WkOAmUpn4XQ0TOmG18sDU1iS2xNHF+buA\nlXVKLp7zgE4VFJsclHAJXtp8anyo7YU99NzUcSF6vboRm3msifL4eE3S7IS9fAaH\n0WWCHwlHMf9IGHqBn9mkwiYySwlId8ps3lvoVV2EOB4wJqa4Y6d4YrqPyFzWop56\njKTlTcJqvQBUFo/y9In/sx8QgONhNwnNAKcrBfiVwn8QHuMRA4c4UJz+NN38ctyt\ndjA/zqT/uXwWhr8Mfl7J+rfdsC5TFPl45qr/gbmB7GRlU2la0dGJv/l0afbINrrG\nNoAgpOeMrwijIdDJ9vG6O3YVV6bIkg==OkO5\n-----END PGP SIGNATURE-----\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n\n=============================================================================\nFreeBSD-SA-19:03.wpa                                        Security Advisory\n                                                          The FreeBSD Project\n\nTopic:          Multiple vulnerabilities in hostapd and wpa_supplicant\n\nCategory:       contrib\nModule:         wpa\nAnnounced:      2019-05-14\nAffects:        All supported versions of FreeBSD. \nCorrected:      2019-05-01 01:42:38 UTC (stable/12, 12.0-STABLE)\n                2019-05-14 22:57:29 UTC (releng/12.0, 12.0-RELEASE-p4)\n                2019-05-01 01:43:17 UTC (stable/11, 11.2-STABLE)\n                2019-05-14 22:59:32 UTC (releng/11.2, 11.2-RELEASE-p10)\nCVE Name:       CVE-2019-9494, CVE-2019-9495, CVE-2019-9496, CVE-2019-9497,\n                CVE-2019-9498, CVE-2019-9499, CVE-2019-11555\n\nFor general information regarding FreeBSD Security Advisories,\nincluding descriptions of the fields above, security branches, and the\nfollowing sections, please visit \u003cURL:https://security.FreeBSD.org/\u003e. \n\nI.   Background\n\nWi-Fi Protected Access II (WPA2) is a security protocol developed by the\nWi-Fi Alliance to secure wireless computer networks. \n\nhostapd(8) and wpa_supplicant(8) are implementations of user space daemon for\naccess points and wireless client that implements the WPA2 protocol. \n\nII.  Problem Description\n\nMultiple vulnerabilities exist in the hostapd(8) and wpa_supplicant(8)\nimplementations.  For more details, please see the reference URLs in the\nReferences section below. \n\nIII. Impact\n\nSecurity of the wireless network may be compromised.  For more details,\nplease see the reference URLS in the References section below. \n\nIV.  Workaround\n\nNo workaround is available, but systems not using hostapd(8) or\nwpa_supplicant(8) are not affected. \n\nV.   Solution\n\nPerform one of the following:\n\n1) Upgrade your vulnerable system to a supported FreeBSD stable or\nrelease / security branch (releng) dated after the correction date. \n\nAfterwards, restart hostapd(8) or wpa_supplicant(8). \n\n2) To update your vulnerable system via a binary patch:\n\nSystems running a RELEASE version of FreeBSD on the i386 or amd64\nplatforms can be updated via the freebsd-update(8) utility:\n\n# freebsd-update fetch\n# freebsd-update install\n\nAfterwards, restart hostapd(8) or wpa_supplicant(8). \n\n3) To update your vulnerable system via a source code patch:\n\nThe following patches have been verified to apply to the applicable\nFreeBSD release branches. \n\na) Download the relevant patch from the location below, and verify the\ndetached PGP signature using your PGP utility. \n\n[FreeBSD 12.0]\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-12.patch.asc\n# gpg --verify wpa-12.patch.asc\n\n[FreeBSD 11.2]\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch\n# fetch https://security.FreeBSD.org/patches/SA-19:03/wpa-11.patch.asc\n# gpg --verify wpa-11.patch.asc\n\nb) Apply the patch.  Execute the following commands as root:\n\n# cd /usr/src\n# patch \u003c /path/to/patch\n\nc) Recompile the operating system using buildworld and installworld as\ndescribed in \u003cURL:https://www.FreeBSD.org/handbook/makeworld.html\u003e. \n\nRestart the applicable daemons, or reboot the system. \n\nVI.  Correction details\n\nThe following list contains the correction revision numbers for each\naffected branch. \n\nBranch/path                                                      Revision\n- -------------------------------------------------------------------------\nstable/12/                                                        r346980\nreleng/12.0/                                                      r347587\nstable/11/                                                        r346981\nreleng/11.2/                                                      r347588\n- -------------------------------------------------------------------------\n\nTo see which files were modified by a particular revision, run the\nfollowing command, replacing NNNNNN with the revision number, on a\nmachine with Subversion installed:\n\n# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base\n\nOr visit the following URL, replacing NNNNNN with the revision number:\n\n\u003cURL:https://svnweb.freebsd.org/base?view=revision\u0026revision=NNNNNN\u003e\n\nVII. References\n\n\u003cURL:https://w1.fi/security/2019-1\u003e\n\u003cURL:https://w1.fi/security/2019-2\u003e\n\u003cURL:https://w1.fi/security/2019-3\u003e\n\u003cURL:https://w1.fi/security/2019-4\u003e\n\u003cURL:https://w1.fi/security/2019-5\u003e\n\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9494\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9495\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9496\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9497\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9498\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9499\u003e\n\u003cURL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11555\u003e\n\nThe latest revision of this advisory is available at\n\u003cURL:https://security.FreeBSD.org/advisories/FreeBSD-SA-19:03.wpa.asc\u003e\n-----BEGIN PGP SIGNATURE-----\n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\nR3lnCzmTd9sg+K6cod2qWWSYdsdEwizcpQDp7M9lRqomiANLqJ4=\n=MXma\n-----END PGP SIGNATURE-----\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-9497"
      },
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9497"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      }
    ],
    "trust": 2.88
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-9497",
        "trust": 3.0
      },
      {
        "db": "PACKETSTORM",
        "id": "152914",
        "trust": 1.8
      },
      {
        "db": "CERT/CC",
        "id": "VU#871675",
        "trust": 1.7
      },
      {
        "db": "JVN",
        "id": "JVNVU94228755",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625",
        "trust": 0.8
      },
      {
        "db": "PACKETSTORM",
        "id": "152481",
        "trust": 0.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.0047",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1258",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2020.4125",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.1775",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-575",
        "trust": 0.6
      },
      {
        "db": "BID",
        "id": "108401",
        "trust": 0.3
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9497",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9497"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-575"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9497"
      }
    ]
  },
  "id": "VAR-201904-0380",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.625
  },
  "last_update_date": "2024-11-23T19:47:51.681000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "WPA Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=91387"
      },
      {
        "title": "Ubuntu Security Notice: wpa vulnerabilities",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=ubuntu_security_notice\u0026qid=USN-3944-1"
      },
      {
        "title": "Debian CVElist Bug Report Logs: src:wpa: multiples vulnerabilities in SAE and EAP-pwd code in wpa",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs\u0026qid=39e042d68cbe59a677ae53b8328d282d"
      },
      {
        "title": "Debian Security Advisories: DSA-4430-1 wpa -- security update",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories\u0026qid=81a56edb299848e0579a7dd950bd73ba"
      },
      {
        "title": "Brocade Security Advisories: BSA-2019-777",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=brocade_security_advisories\u0026qid=9f89054fc8bab7a9de83cce34e487404"
      },
      {
        "title": "Fortinet Security Advisories: Dragonblood vulnerabilities in WiFi WPA3 standard implementation",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=fortinet_security_advisories\u0026qid=FG-IR-19-107"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2019-9497"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-575"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-287",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-301",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-9497"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 3.6,
        "url": "https://w1.fi/security/2019-4/"
      },
      {
        "trust": 2.3,
        "url": "http://packetstormsecurity.com/files/152914/freebsd-security-advisory-freebsd-sa-19-03.wpa.html"
      },
      {
        "trust": 2.3,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:03.wpa.asc"
      },
      {
        "trust": 1.9,
        "url": "https://wpa3.mathyvanhoef.com/"
      },
      {
        "trust": 1.7,
        "url": "https://seclists.org/bugtraq/2019/may/40"
      },
      {
        "trust": 1.7,
        "url": "https://www.synology.com/security/advisory/synology_sa_19_16"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-1/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-2/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/security/2019-3/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/hostapd/"
      },
      {
        "trust": 1.6,
        "url": "https://w1.fi/cgit/hostap/log/"
      },
      {
        "trust": 1.6,
        "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
      },
      {
        "trust": 1.6,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9497"
      },
      {
        "trust": 1.1,
        "url": "http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00021.html"
      },
      {
        "trust": 1.1,
        "url": "https://lists.debian.org/debian-lts-announce/2019/07/msg00030.html"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56obbojjskrtdgexzovfstp4hdsdblae/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/svmjofeybgxzlff5iolw67ssopkfejp3/"
      },
      {
        "trust": 1.0,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9495"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/svmjofeybgxzlff5iolw67ssopkfejp3/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56obbojjskrtdgexzovfstp4hdsdblae/"
      },
      {
        "trust": 1.0,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/tdozgr3t7fvo5jszwk2qpr7aofiejtiz/"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9498"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9499"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9494"
      },
      {
        "trust": 0.9,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-9496"
      },
      {
        "trust": 0.8,
        "url": "https://w1.fi/wpa_supplicant/ "
      },
      {
        "trust": 0.8,
        "url": "https://freeradius.org/security/"
      },
      {
        "trust": 0.8,
        "url": "https://en.avm.de/service/current-security-notifications/"
      },
      {
        "trust": 0.8,
        "url": "https://www.lancom-systems.com/service-support/instant-help/general-security-information/"
      },
      {
        "trust": 0.8,
        "url": "https://github.com/openssl/openssl/pull/8750"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9497"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9498"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9499"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9494"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9495"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9496"
      },
      {
        "trust": 0.8,
        "url": "https://jvn.jp/vu/jvnvu94228755/"
      },
      {
        "trust": 0.8,
        "url": "https://www.kb.cert.org/vuls/id/871675/"
      },
      {
        "trust": 0.8,
        "url": "https://w1.fi/wpa_supplicant/"
      },
      {
        "trust": 0.7,
        "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/tdozgr3t7fvo5jszwk2qpr7aofiejtiz/"
      },
      {
        "trust": 0.6,
        "url": "http://www.debian.org/security/2019/dsa-4430"
      },
      {
        "trust": 0.6,
        "url": "https://fortiguard.com/psirt/fg-ir-19-107"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.0047/"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2020.4125/"
      },
      {
        "trust": 0.6,
        "url": "https://vigilance.fr/vulnerability/wpa-supplicant-four-vulnerabilities-29006"
      },
      {
        "trust": 0.6,
        "url": "https://packetstormsecurity.com/files/152481/debian-security-advisory-4430-1.html"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/81182"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/78946"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.1775/"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1699164"
      },
      {
        "trust": 0.3,
        "url": "https://w1.fi"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9497"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9498"
      },
      {
        "trust": 0.3,
        "url": "https://access.redhat.com/security/cve/cve-2019-9499"
      },
      {
        "trust": 0.3,
        "url": "https://w1.fi/security/2019-4/eap-pwd-missing-commit-validation.txt"
      },
      {
        "trust": 0.3,
        "url": "https://www.freebsd.org/security/advisories/freebsd-sa-19:03.wpa.asc"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1699168"
      },
      {
        "trust": 0.3,
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1699170"
      },
      {
        "trust": 0.3,
        "url": "https://usn.ubuntu.com/3944-1"
      },
      {
        "trust": 0.3,
        "url": "https://seclists.org/oss-sec/2019/q2/19"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/287.html"
      },
      {
        "trust": 0.1,
        "url": "https://www.rapid7.com/db/vulnerabilities/debian-cve-2019-9497"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://usn.ubuntu.com/3944-1/"
      },
      {
        "trust": 0.1,
        "url": "https://www.kb.cert.org/vuls/id/871675"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/faq"
      },
      {
        "trust": 0.1,
        "url": "https://www.debian.org/security/"
      },
      {
        "trust": 0.1,
        "url": "https://security-tracker.debian.org/tracker/wpa"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11555\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://svnweb.freebsd.org/base?view=revision\u0026revision=nnnnnn\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-11.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9494\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9497\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-12.patch.asc"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9499\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-1\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-4\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-5\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-2\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://w1.fi/security/2019-3\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://www.freebsd.org/handbook/makeworld.html\u003e."
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-11.patch"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9496\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/advisories/freebsd-sa-19:03.wpa.asc\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9495\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-9498\u003e"
      },
      {
        "trust": 0.1,
        "url": "https://security.freebsd.org/patches/sa-19:03/wpa-12.patch"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9497"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-575"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9497"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-9497"
      },
      {
        "db": "BID",
        "id": "108401"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-575"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-9497"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-04-12T00:00:00",
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "date": "2019-04-17T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9497"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "BID",
        "id": "108401"
      },
      {
        "date": "2019-04-16T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "date": "2019-04-11T14:10:46",
        "db": "PACKETSTORM",
        "id": "152481"
      },
      {
        "date": "2019-05-15T15:30:08",
        "db": "PACKETSTORM",
        "id": "152914"
      },
      {
        "date": "2019-04-11T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201904-575"
      },
      {
        "date": "2019-04-17T14:29:03.963000",
        "db": "NVD",
        "id": "CVE-2019-9497"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2019-06-05T00:00:00",
        "db": "CERT/CC",
        "id": "VU#871675"
      },
      {
        "date": "2019-05-15T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-9497"
      },
      {
        "date": "2019-04-10T00:00:00",
        "db": "BID",
        "id": "108401"
      },
      {
        "date": "2019-12-27T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-002625"
      },
      {
        "date": "2020-11-23T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201904-575"
      },
      {
        "date": "2024-11-21T04:51:44.057000",
        "db": "NVD",
        "id": "CVE-2019-9497"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-575"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "WPA3 design issues and implementation vulnerabilities in hostapd and wpa_supplicant",
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#871675"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "authorization issue",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201904-575"
      }
    ],
    "trust": 0.6
  }
}

    CVE-2024-3596 (GCVE-0-2024-3596)

    Vulnerability from nvd – Published: 2024-07-09 12:02 – Updated: 2026-06-09 09:01
    VLAI
    Title
    RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
    Summary
    RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
    Severity
    9 (Critical)
    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    IETF RFC Affected: 2865
    		Create a notification for this product.
    ietf rfc Affected: 2865
        cpe:2.3:a:ietf:rfc:2865:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Siemens CPC80 Central Processing/Communication Affected: 0 , < V16.51 (custom)
    		Create a notification for this product.
    Siemens CPCI85 Central Processing/Communication Affected: 0 , < V6.20 (custom)
    		Create a notification for this product.
    Siemens POWER METER SICAM Q100 family Affected: 0 , < V2.70 (custom)
    		Create a notification for this product.
    Siemens POWER METER SICAM Q200 family Affected: 0 , < V2.83 (custom)
    		Create a notification for this product.
    Siemens Powerlink IP Affected: 0 , < V4.22 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM APE1808 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM CROSSBOW Affected: 0 , < V5.6 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i800 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i800NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i801 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i801NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i802 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i802NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i803 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i803NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M2100 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M2100NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M2200 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M2200NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M969 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M969NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) EU Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) NAM Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC30 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC30NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC8388 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC8388 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC8388NC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC8388NC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX MX5000 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX MX5000RE Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1400 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1500 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1501 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1510 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1511 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1512 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1524 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1536 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX5000 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RP110 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RP110NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600F Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600FNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600T Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600TNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS400 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS400NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS401 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS401NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416NCv2 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416NCv2 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416P Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416PNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416PNCv2 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416PNCv2 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416Pv2 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416Pv2 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416v2 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416v2 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000A Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000ANC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000H Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000HNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000T Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000TNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900 (32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900 (32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900G Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900G (32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900G (32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900GNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900GNC(32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900GNC(32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900GP Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900GPNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900L Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900LNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900M-GETS-C01 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900M-GETS-XX Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900M-STND-C01 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900M-STND-XX Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900MNC-GETS-C01 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900MNC-GETS-XX Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900MNC-STND-XX Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900MNC-STND-XX-C01 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900NC(32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900NC(32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900W Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS910 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS910L Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS910LNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS910NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS910W Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS920L Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS920LNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS920W Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS930L Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS930LNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS930W Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS940G Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS940GNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS969 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS969NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100 (32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100 (32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100NC(32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100NC(32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100P Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100P (32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100P (32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100PNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100PNC (32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100PNC (32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2200 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2200NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2288 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2288 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2288NC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2288NC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300NC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300NC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300P V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300P V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300PNC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300PNC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2488 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2488 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2488NC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2488NC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG907R Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG908C Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG909R Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG910C Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG920P V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG920P V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG920PNC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG920PNC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSL910 Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSL910NC Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RST2228 Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RST2228P Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RST2428P Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RST916C Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RST916P Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M804PB Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M812-1 ADSL-Router Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M816-1 ADSL-Router Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M826-2 SHDSL-Router Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-2 Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 3G-Router (CN) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 (ROK) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (EU) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (NAM) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (A1) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (B1) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (EU) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (A1) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (B1) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (CN) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (EU) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (RoW) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 EEC LAN-Router Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 LAN-Router Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC622-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC626-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC632-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC636-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC642-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC646-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1748-1 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-1 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2 EEC M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2IA M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W721-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W722-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W734-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W734-1 RJ45 (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W738-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W748-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W748-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W761-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 RJ45 (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 EEC (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2 SFP Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2IA RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAB762-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (ME) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (US) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (ME) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (US) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (ME) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (US) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 iFeatures Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 (US) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (ME) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (USA) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB205-3 (SC, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB205-3 (ST, E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB205-3 (ST, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB205-3LD (SC, E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB205-3LD (SC, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2 (SC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2 (ST/BFOC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2 LD Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2 SC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2 ST Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2LD Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB208 (E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB208 (PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3 (SC, E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3 (SC, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3 (ST, E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3 (ST, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3LD (SC, E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3LD (SC, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB216 (E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB216 (PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2 (SC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2 (ST/BFOC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2G PoE Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2G PoE (54 V DC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2G PoE EEC (54 V DC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2SFP Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2SFP EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2SFP G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2SFP G (EIP DEF.) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2SFP G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208G (EIP def.) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208G PoE Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208G PoE (54 V DC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-3G PoE Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-3G PoE (54 V DC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-4C Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-4C G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-4C G (EIP Def.) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-4C G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC224 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC224-4C G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC224-4C G (EIP Def.) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC224-4C G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC316-8 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC324-4 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC324-4 EEC Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC332 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC416-8 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC424-4 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC432 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XCH328 Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XCM324 Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XCM328 Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XCM332 Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204 DNA Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204-2BA Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204-2BA DNA Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-4C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-4C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-8C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-8C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM416-4C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM416-4C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208 (Ethernet/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208G PoE EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208G PP Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208PoE EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216 (Ethernet/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216 (V2) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216EEC (V2) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216G PoE EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216POE EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216PoE EEC (V2) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR302-32 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR322-12 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324WG (24 x FE, AC 230V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324WG (24 X FE, DC 24V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-2C PoE WG Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-2C PoE WG (without UL) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-8 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-8 EEC Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR328-4C WG (24XFE, 4XGE, 24V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR328-4C WG (28xGE, AC 230V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR328-4C WG (28xGE, DC 24V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR502-32 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR522-12 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 1x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 1x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 24V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 24V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 2x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 2x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8WG Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 1x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 1x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 24V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 24V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 2x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 2x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (2HR2, L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (2HR2) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M (2HR2, L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M (2HR2) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (230 V AC, 12xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (230 V AC, 8xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (24 V DC, 12xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (24 V DC, 8xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (2x230 V AC, 12xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (2x230 V AC, 8xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SICAM AK 3 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SICAM BC Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SICAM GridEdge (Classic) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SICAM GridEdge Applications for SICAM 8 Platform Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SICAM GridPass Affected: 0 , < V2.50 (custom)
    		Create a notification for this product.
    Siemens SICAM TM Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SICORE Base system Affected: 0 , < V2.20.0 (custom)
    		Create a notification for this product.
    Siemens SINEC INS Affected: 0 , < V1.0 SP2 Update 4 (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE XC206-2 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE XC206-2SFP Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE XC208 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE XC216-4C Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 - CP200 Devices Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MD84 (CP300) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MD85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MD86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MD89 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MD89 (CP300) V9.6x Affected: 0 , < V9.68 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MU85 (CP300) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7KE85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SA82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SA82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SA86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SA87 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SD82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SD82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SD86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SD87 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ81 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ81 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SK82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SK82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SK85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SL82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SL82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SL86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SL87 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SS85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7ST85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7ST85 (CP300) V9.6x Affected: 0 , < V9.68 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7ST86 (CP300) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7ST86 (CP300) V9.8x Affected: 0 , < V9.83 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SX82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SX85 (CP300) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SY82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UM85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UT82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UT82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UT85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UT86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UT87 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7VE85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7VK87 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7VU85 (CP300) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 Compact 7SX800 (CP050) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Credits
    Thanks to Sharon Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl who researched and reported this vulnerability
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:ietf:rfc:2865:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rfc",
            "vendor": "ietf",
            "versions": [
              {
                "status": "affected",
                "version": "2865"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-3596",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-11T03:55:37.141738Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-04T21:05:25.373Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T17:20:52.225Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20240822-0001/"
          },
          {
            "url": "https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://datatracker.ietf.org/doc/html/rfc2865"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.blastradius.fail/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/07/09/4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014"
          },
          {
            "url": "https://www.kb.cert.org/vuls/id/456537"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "CPC80 Central Processing/Communication",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V16.51",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "CPCI85 Central Processing/Communication",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.20",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "POWER METER SICAM Q100 family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.70",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "POWER METER SICAM Q200 family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.83",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Powerlink IP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.22",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM APE1808",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM APE1808",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM CROSSBOW",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i800",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i800NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i801",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i801NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i802",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i802NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i803",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i803NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M2100",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M2100NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M2200",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M2200NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M969",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M969NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RM1224 LTE(4G) EU",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RM1224 LTE(4G) NAM",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC30",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC30NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC8388 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC8388 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC8388NC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC8388NC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX MX5000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX MX5000RE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1400",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1500",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1501",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1510",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1511",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1512",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1524",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1536",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX5000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RP110",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RP110NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600F",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600FNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600T",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600TNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS400",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS400NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS401",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS401NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416NCv2 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416NCv2 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416PNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416PNCv2 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416PNCv2 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416Pv2 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416Pv2 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416v2 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416v2 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000A",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000ANC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000H",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000HNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000T",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000TNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900 (32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900 (32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900G (32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900G (32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900GNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900GNC(32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900GNC(32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900GP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900GPNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900L",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900LNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900M-GETS-C01",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900M-GETS-XX",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900M-STND-C01",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900M-STND-XX",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900MNC-GETS-C01",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900MNC-GETS-XX",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900MNC-STND-XX",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900MNC-STND-XX-C01",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900NC(32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900NC(32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900W",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS910",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS910L",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS910LNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS910NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS910W",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS920L",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS920LNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS920W",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS930L",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS930LNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS930W",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS940G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS940GNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS969",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS969NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100 (32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100 (32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100NC(32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100NC(32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100P (32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100P (32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100PNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100PNC (32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100PNC (32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2200",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2200NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2288 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2288 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2288NC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2288NC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300NC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300NC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300P V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300P V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300PNC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300PNC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2488 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2488 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2488NC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2488NC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG907R",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG908C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG909R",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG910C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG920P V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG920P V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG920PNC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG920PNC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSL910",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSL910NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST2228",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST2228P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST2428P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST916C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST916P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M804PB",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M812-1 ADSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M812-1 ADSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M816-1 ADSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M816-1 ADSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M826-2 SHDSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-3 3G-Router (CN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-3 (ROK)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4 (NAM)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (A1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (B1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (A1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (B1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (CN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (RoW)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE S615 EEC LAN-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE S615 LAN-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC622-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC626-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC632-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC636-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC642-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC646-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2 EEC M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2IA M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAB762-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUB762-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUB762-1 iFeatures",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X304-2FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X306-1LD FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH+",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH+",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X320-1 FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X320-1-2LD FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X408-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3 (SC, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3 (ST, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3 (ST, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3 (ST, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3LD (SC, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3LD (SC, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2 (SC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2 (ST/BFOC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2 LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2 SC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2 ST",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB208 (E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB208 (PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3 (SC, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3 (SC, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3 (ST, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3 (ST, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3LD (SC, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3LD (SC, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB216 (E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB216 (PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2 (SC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2 (ST/BFOC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2G PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2G PoE (54 V DC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2G PoE EEC (54 V DC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2SFP EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2SFP G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2SFP G (EIP DEF.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2SFP G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208G (EIP def.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208G PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208G PoE (54 V DC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-3G PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-3G PoE (54 V DC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-4C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-4C G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-4C G (EIP Def.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-4C G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC224",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC224-4C G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC224-4C G (EIP Def.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC224-4C G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC316-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC324-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC324-4 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC332",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC416-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC424-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC432",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XCH328",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XCM324",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XCM328",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XCM332",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204 DNA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204-2BA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204-2BA DNA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM408-4C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM408-4C (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM408-8C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM408-8C (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM416-4C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM416-4C (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208 (Ethernet/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208G PoE EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208G PP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208PoE EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208PoE EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216 (Ethernet/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216 (V2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216EEC (V2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216G PoE EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216POE EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216PoE EEC (V2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M TS (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M TS (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324WG (24 x FE, AC 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324WG (24 X FE, DC 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-2C PoE WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-2C PoE WG (without UL)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (24XFE, 4XGE, 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (28xGE, AC 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (28xGE, DC 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 1x230V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 1x230V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 24V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 24V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 2x230V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 2x230V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 1x230V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 1x230V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 24V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 24V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 2x230V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 2x230V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR528-6M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR528-6M (2HR2, L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR528-6M (2HR2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR528-6M (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR552-12M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR552-12M (2HR2, L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR552-12M (2HR2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR552-12M (2HR2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRH334 (24 V DC, 8xFO, CC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (230 V AC, 12xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (230 V AC, 8xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (24 V DC, 12xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (24 V DC, 8xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (2x230 V AC, 12xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (2x230 V AC, 8xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM AK 3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM BC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM GridEdge (Classic)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM GridEdge Applications for SICAM 8 Platform",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM GridPass",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.50",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM TM",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICORE Base system",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.20.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINEC INS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.0 SP2 Update 4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE XC206-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE XC206-2SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE XC208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE XC216-4C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 - CP200 Devices",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MD84 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MD85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MD86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MD89 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MD89 (CP300) V9.6x",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V9.68",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MU85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7KE85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SA82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SA82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SA86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SA87 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SD82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SD82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SD86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SD87 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ81 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ81 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SK82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SK82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SK85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SL82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SL82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SL86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SL87 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SS85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7ST85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7ST85 (CP300) V9.6x",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V9.68",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7ST86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7ST86 (CP300) V9.8x",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V9.83",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SX82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SX85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SY82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UM85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UT82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UT82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UT85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UT86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UT87 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7VE85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7VK87 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7VU85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 Compact 7SX800 (CP050)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-09T09:01:52.617Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-364175.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-723487.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-770770.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-794185.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "RFC",
          "vendor": "IETF",
          "versions": [
            {
              "status": "affected",
              "version": "2865"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Thanks to Sharon Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl who researched and reported this vulnerability"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-328: Use of Weak Hash",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-03T17:29:16.788Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://datatracker.ietf.org/doc/html/rfc2865"
        },
        {
          "url": "https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/"
        },
        {
          "url": "https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf"
        },
        {
          "url": "https://www.blastradius.fail/"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2024/07/09/4"
        },
        {
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014"
        },
        {
          "name": "Siemens Security Advisory by Siemens ProductCERT for  SIPROTEC, SICAM and related product",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-794185.html"
        },
        {
          "name": "Siemens Security Advisory by Siemens ProductCERT to SCALANCE, RUGGEDCOM and related products.",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-723487.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.",
      "x_generator": {
        "engine": "VINCE 3.0.4",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2024-3596"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2024-3596",
    "datePublished": "2024-07-09T12:02:53.001Z",
    "dateReserved": "2024-04-10T15:09:45.391Z",
    "dateUpdated": "2026-06-09T09:01:52.617Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2022-41861 (GCVE-0-2022-41861)

    Vulnerability from nvd – Published: 2023-01-17 00:00 – Updated: 2025-11-03 19:27
    VLAI
    Summary
    A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
    Severity
    6.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    n/a freeradius Affected: All versions from 0.0.1 to 3.0.25
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:27:40.244Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/commit/0ec2b39d260e"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-41861",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T16:27:46.890633Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T16:28:17.085Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "freeradius",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "All versions from 0.0.1 to 3.0.25"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-17T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://freeradius.org/security/"
        },
        {
          "url": "https://github.com/FreeRADIUS/freeradius-server/commit/0ec2b39d260e"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-41861",
    "datePublished": "2023-01-17T00:00:00.000Z",
    "dateReserved": "2022-09-30T00:00:00.000Z",
    "dateUpdated": "2025-11-03T19:27:40.244Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2022-41860 (GCVE-0-2022-41860)

    Vulnerability from nvd – Published: 2023-01-17 00:00 – Updated: 2025-11-03 19:27
    VLAI
    Summary
    In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    n/a freeradius Affected: All versions from 0.9.3 to 3.0.25
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:27:38.875Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/commit/f1cdbb33ec61c4a64a"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-41860",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T16:39:17.283850Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T16:39:35.420Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "freeradius",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "All versions from 0.9.3 to 3.0.25"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-17T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://freeradius.org/security/"
        },
        {
          "url": "https://github.com/FreeRADIUS/freeradius-server/commit/f1cdbb33ec61c4a64a"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-41860",
    "datePublished": "2023-01-17T00:00:00.000Z",
    "dateReserved": "2022-09-30T00:00:00.000Z",
    "dateUpdated": "2025-11-03T19:27:38.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2022-41859 (GCVE-0-2022-41859)

    Vulnerability from nvd – Published: 2023-01-17 00:00 – Updated: 2025-11-03 19:27
    VLAI
    Summary
    In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    n/a freeradius Affected: unknown
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:27:37.502Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/commit/9e5e8f2f"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-41859",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T16:40:02.278497Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T16:40:36.415Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "freeradius",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-17T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://freeradius.org/security/"
        },
        {
          "url": "https://github.com/FreeRADIUS/freeradius-server/commit/9e5e8f2f"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-41859",
    "datePublished": "2023-01-17T00:00:00.000Z",
    "dateReserved": "2022-09-30T00:00:00.000Z",
    "dateUpdated": "2025-11-03T19:27:37.502Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2019-17185 (GCVE-0-2019-17185)

    Vulnerability from nvd – Published: 2020-03-21 00:13 – Updated: 2024-08-05 01:33
    VLAI
    Summary
    In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:33:17.262Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20"
          },
          {
            "name": "openSUSE-SU-2020:0553",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-26T17:06:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/security/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20"
        },
        {
          "name": "openSUSE-SU-2020:0553",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-17185",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://freeradius.org/security/",
              "refsource": "MISC",
              "url": "https://freeradius.org/security/"
            },
            {
              "name": "https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20",
              "refsource": "CONFIRM",
              "url": "https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20"
            },
            {
              "name": "openSUSE-SU-2020:0553",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-17185",
    "datePublished": "2020-03-21T00:13:05.000Z",
    "dateReserved": "2019-10-04T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:33:17.262Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2015-9542 (GCVE-0-2015-9542)

    Vulnerability from nvd – Published: 2020-02-24 14:14 – Updated: 2024-08-06 08:51
    VLAI
    Summary
    add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    https://github.com/FreeRADIUS/pam_radius/commit/0… x_refsource_MISC
    https://lists.debian.org/debian-lts-announce/2020… mailing-listx_refsource_MLIST
    https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2… x_refsource_CONFIRM
    https://usn.ubuntu.com/4290-1/ vendor-advisoryx_refsource_UBUNTU
    https://usn.ubuntu.com/4290-2/ vendor-advisoryx_refsource_UBUNTU
    https://lists.debian.org/debian-lts-announce/2020… mailing-listx_refsource_MLIST
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:51:05.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb1e0d96c06c3ffa0b14d36d0"
          },
          {
            "name": "[debian-lts-announce] 20200222 [SECURITY] [DLA 2116-1] libpam-radius-auth security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00023.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-9542"
          },
          {
            "name": "USN-4290-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4290-1/"
          },
          {
            "name": "USN-4290-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4290-2/"
          },
          {
            "name": "[debian-lts-announce] 20200801 [SECURITY] [DLA 2304-1] libpam-radius-auth security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00000.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-01T19:06:06.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb1e0d96c06c3ffa0b14d36d0"
        },
        {
          "name": "[debian-lts-announce] 20200222 [SECURITY] [DLA 2116-1] libpam-radius-auth security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00023.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-9542"
        },
        {
          "name": "USN-4290-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4290-1/"
        },
        {
          "name": "USN-4290-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4290-2/"
        },
        {
          "name": "[debian-lts-announce] 20200801 [SECURITY] [DLA 2304-1] libpam-radius-auth security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00000.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-9542",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb1e0d96c06c3ffa0b14d36d0",
              "refsource": "MISC",
              "url": "https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb1e0d96c06c3ffa0b14d36d0"
            },
            {
              "name": "[debian-lts-announce] 20200222 [SECURITY] [DLA 2116-1] libpam-radius-auth security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00023.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-9542",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-9542"
            },
            {
              "name": "USN-4290-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4290-1/"
            },
            {
              "name": "USN-4290-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4290-2/"
            },
            {
              "name": "[debian-lts-announce] 20200801 [SECURITY] [DLA 2304-1] libpam-radius-auth security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00000.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-9542",
    "datePublished": "2020-02-24T14:14:13.000Z",
    "dateReserved": "2020-02-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T08:51:05.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2019-13456 (GCVE-0-2019-13456)

    Vulnerability from nvd – Published: 2019-12-03 19:53 – Updated: 2024-08-04 23:49
    VLAI
    Summary
    In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:49:25.031Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://wpa3.mathyvanhoef.com"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737663"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa"
          },
          {
            "name": "openSUSE-SU-2020:0553",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the \"Dragonblood\" attack and CVE-2019-9494."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-26T17:06:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/security/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://wpa3.mathyvanhoef.com"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737663"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa"
        },
        {
          "name": "openSUSE-SU-2020:0553",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-13456",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the \"Dragonblood\" attack and CVE-2019-9494."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://freeradius.org/security/",
              "refsource": "MISC",
              "url": "https://freeradius.org/security/"
            },
            {
              "name": "https://wpa3.mathyvanhoef.com",
              "refsource": "MISC",
              "url": "https://wpa3.mathyvanhoef.com"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1737663",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737663"
            },
            {
              "name": "https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa",
              "refsource": "CONFIRM",
              "url": "https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa"
            },
            {
              "name": "openSUSE-SU-2020:0553",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-13456",
    "datePublished": "2019-12-03T19:53:53.000Z",
    "dateReserved": "2019-07-09T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:49:25.031Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2019-10143 (GCVE-0-2019-10143)

    Vulnerability from nvd – Published: 2019-05-24 00:00 – Updated: 2024-08-04 22:10 Disputed
    VLAI
    Summary
    It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."
    Severity
    6.4 (Medium)
    CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: poc Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    freeradius freeradius Affected: affects <= 3.0.19
    		Create a notification for this product.
    freeradius freeradius Affected: 0 , ≤ 3.0.19 (custom)
        cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*
    		 Create a notification for this product.
    fedoraproject fedora Affected: 30
        cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
    		 Create a notification for this product.
    fedoraproject fedora Affected: 29
        cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
    		 Create a notification for this product.
    redhat enterprise_linux Affected: 8.0
        cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "freeradius",
            "vendor": "freeradius",
            "versions": [
              {
                "lessThanOrEqual": "3.0.19",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fedora",
            "vendor": "fedoraproject",
            "versions": [
              {
                "status": "affected",
                "version": "30"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fedora",
            "vendor": "fedoraproject",
            "versions": [
              {
                "status": "affected",
                "version": "29"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "enterprise_linux",
            "vendor": "redhat",
            "versions": [
              {
                "status": "affected",
                "version": "8.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-10143",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-01T19:23:06.388705Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-01T19:24:21.005Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:10:10.031Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2019-4a8eeaf80e",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TKODLHHUOVAYENTBP4D3N25ST3Q6LJBP/"
          },
          {
            "name": "FEDORA-2019-9454ce61b2",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6VKBZAZKJP5QKXDXRKCM2ZPZND3TFAX/"
          },
          {
            "name": "RHSA-2019:3353",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3353"
          },
          {
            "name": "20191115 [AIT-SA-20191112-01] CVE-2019-10143: Privilege Escalation via Logrotate in FreeRadius",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Nov/14"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155361/FreeRadius-3.0.19-Logrotate-Privilege-Escalation.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10143"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/pull/2666"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "freeradius",
          "vendor": "freeradius",
          "versions": [
            {
              "status": "affected",
              "version": "affects \u003c= 3.0.19"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated \"there is simply no way for anyone to gain privileges through this alleged issue.\""
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "CWE-266",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-250",
              "description": "CWE-250",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-12T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "FEDORA-2019-4a8eeaf80e",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TKODLHHUOVAYENTBP4D3N25ST3Q6LJBP/"
        },
        {
          "name": "FEDORA-2019-9454ce61b2",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6VKBZAZKJP5QKXDXRKCM2ZPZND3TFAX/"
        },
        {
          "name": "RHSA-2019:3353",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3353"
        },
        {
          "name": "20191115 [AIT-SA-20191112-01] CVE-2019-10143: Privilege Escalation via Logrotate in FreeRadius",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Nov/14"
        },
        {
          "url": "https://freeradius.org/security/"
        },
        {
          "url": "http://packetstormsecurity.com/files/155361/FreeRadius-3.0.19-Logrotate-Privilege-Escalation.html"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10143"
        },
        {
          "url": "https://github.com/FreeRADIUS/freeradius-server/pull/2666"
        }
      ],
      "tags": [
        "disputed"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-10143",
    "datePublished": "2019-05-24T00:00:00.000Z",
    "dateReserved": "2019-03-27T00:00:00.000Z",
    "dateUpdated": "2024-08-04T22:10:10.031Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2019-11235 (GCVE-0-2019-11235)

    Vulnerability from nvd – Published: 2019-04-21 16:40 – Updated: 2024-08-04 22:48
    VLAI
    Summary
    FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used" protection mechanism, aka a "Dragonblood" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:48:08.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/871675/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695748"
          },
          {
            "name": "USN-3954-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3954-1/"
          },
          {
            "name": "openSUSE-SU-2019:1346",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
          },
          {
            "name": "RHSA-2019:1131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1131"
          },
          {
            "name": "RHSA-2019:1142",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1142"
          },
          {
            "name": "openSUSE-SU-2019:1394",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
          },
          {
            "name": "openSUSE-SU-2020:0542",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRADIUS before 3.0.19 mishandles the \"each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used\" protection mechanism, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-23T15:06:24.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kb.cert.org/vuls/id/871675/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/security/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695748"
        },
        {
          "name": "USN-3954-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3954-1/"
        },
        {
          "name": "openSUSE-SU-2019:1346",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
        },
        {
          "name": "RHSA-2019:1131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1131"
        },
        {
          "name": "RHSA-2019:1142",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1142"
        },
        {
          "name": "openSUSE-SU-2019:1394",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
        },
        {
          "name": "openSUSE-SU-2020:0542",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-11235",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "FreeRADIUS before 3.0.19 mishandles the \"each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used\" protection mechanism, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19",
              "refsource": "MISC",
              "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
            },
            {
              "name": "https://papers.mathyvanhoef.com/dragonblood.pdf",
              "refsource": "MISC",
              "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
            },
            {
              "name": "https://www.kb.cert.org/vuls/id/871675/",
              "refsource": "MISC",
              "url": "https://www.kb.cert.org/vuls/id/871675/"
            },
            {
              "name": "https://freeradius.org/security/",
              "refsource": "MISC",
              "url": "https://freeradius.org/security/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1695748",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695748"
            },
            {
              "name": "USN-3954-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3954-1/"
            },
            {
              "name": "openSUSE-SU-2019:1346",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
            },
            {
              "name": "RHSA-2019:1131",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1131"
            },
            {
              "name": "RHSA-2019:1142",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1142"
            },
            {
              "name": "openSUSE-SU-2019:1394",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
            },
            {
              "name": "openSUSE-SU-2020:0542",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-11235",
    "datePublished": "2019-04-21T16:40:32.000Z",
    "dateReserved": "2019-04-15T00:00:00.000Z",
    "dateUpdated": "2024-08-04T22:48:08.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2019-11234 (GCVE-0-2019-11234)

    Vulnerability from nvd – Published: 2019-04-21 16:36 – Updated: 2024-08-04 22:48
    VLAI
    Summary
    FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:48:08.954Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/871675/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695783"
          },
          {
            "name": "USN-3954-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3954-1/"
          },
          {
            "name": "openSUSE-SU-2019:1346",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
          },
          {
            "name": "RHSA-2019:1131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1131"
          },
          {
            "name": "RHSA-2019:1142",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1142"
          },
          {
            "name": "openSUSE-SU-2019:1394",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
          },
          {
            "name": "openSUSE-SU-2020:0542",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9497."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-23T15:06:23.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kb.cert.org/vuls/id/871675/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/security/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695783"
        },
        {
          "name": "USN-3954-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3954-1/"
        },
        {
          "name": "openSUSE-SU-2019:1346",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
        },
        {
          "name": "RHSA-2019:1131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1131"
        },
        {
          "name": "RHSA-2019:1142",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1142"
        },
        {
          "name": "openSUSE-SU-2019:1394",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
        },
        {
          "name": "openSUSE-SU-2020:0542",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-11234",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9497."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19",
              "refsource": "MISC",
              "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
            },
            {
              "name": "https://papers.mathyvanhoef.com/dragonblood.pdf",
              "refsource": "MISC",
              "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
            },
            {
              "name": "https://www.kb.cert.org/vuls/id/871675/",
              "refsource": "MISC",
              "url": "https://www.kb.cert.org/vuls/id/871675/"
            },
            {
              "name": "https://freeradius.org/security/",
              "refsource": "MISC",
              "url": "https://freeradius.org/security/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1695783",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695783"
            },
            {
              "name": "USN-3954-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3954-1/"
            },
            {
              "name": "openSUSE-SU-2019:1346",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
            },
            {
              "name": "RHSA-2019:1131",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1131"
            },
            {
              "name": "RHSA-2019:1142",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1142"
            },
            {
              "name": "openSUSE-SU-2019:1394",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
            },
            {
              "name": "openSUSE-SU-2020:0542",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-11234",
    "datePublished": "2019-04-21T16:36:48.000Z",
    "dateReserved": "2019-04-15T00:00:00.000Z",
    "dateUpdated": "2024-08-04T22:48:08.954Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2017-10987 (GCVE-0-2017-10987)

    Vulnerability from nvd – Published: 2017-07-17 16:00 – Updated: 2024-08-05 17:57
    VLAI
    Summary
    An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/bid/99970 vdb-entryx_refsource_BID
    http://www.debian.org/security/2017/dsa-3930 vendor-advisoryx_refsource_DEBIAN
    https://access.redhat.com/errata/RHSA-2017:2389 vendor-advisoryx_refsource_REDHAT
    http://freeradius.org/security/fuzzer-2017.html x_refsource_CONFIRM
    Date Public
    2017-07-17 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:57:56.667Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "99970",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99970"
          },
          {
            "name": "DSA-3930",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3930"
          },
          {
            "name": "RHSA-2017:2389",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2389"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://freeradius.org/security/fuzzer-2017.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-07-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows \"DHCP - Buffer over-read in fr_dhcp_decode_suboptions()\" and a denial of service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "99970",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99970"
        },
        {
          "name": "DSA-3930",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3930"
        },
        {
          "name": "RHSA-2017:2389",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2389"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://freeradius.org/security/fuzzer-2017.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2017-10987",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows \"DHCP - Buffer over-read in fr_dhcp_decode_suboptions()\" and a denial of service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "99970",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99970"
            },
            {
              "name": "DSA-3930",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3930"
            },
            {
              "name": "RHSA-2017:2389",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2389"
            },
            {
              "name": "http://freeradius.org/security/fuzzer-2017.html",
              "refsource": "CONFIRM",
              "url": "http://freeradius.org/security/fuzzer-2017.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2017-10987",
    "datePublished": "2017-07-17T16:00:00.000Z",
    "dateReserved": "2017-07-06T00:00:00.000Z",
    "dateUpdated": "2024-08-05T17:57:56.667Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2024-3596 (GCVE-0-2024-3596)

    Vulnerability from cvelistv5 – Published: 2024-07-09 12:02 – Updated: 2026-06-09 09:01
    VLAI
    Title
    RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
    Summary
    RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
    Severity
    9 (Critical)
    CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    IETF RFC Affected: 2865
    		Create a notification for this product.
    ietf rfc Affected: 2865
        cpe:2.3:a:ietf:rfc:2865:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Siemens CPC80 Central Processing/Communication Affected: 0 , < V16.51 (custom)
    		Create a notification for this product.
    Siemens CPCI85 Central Processing/Communication Affected: 0 , < V6.20 (custom)
    		Create a notification for this product.
    Siemens POWER METER SICAM Q100 family Affected: 0 , < V2.70 (custom)
    		Create a notification for this product.
    Siemens POWER METER SICAM Q200 family Affected: 0 , < V2.83 (custom)
    		Create a notification for this product.
    Siemens Powerlink IP Affected: 0 , < V4.22 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM APE1808 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM CROSSBOW Affected: 0 , < V5.6 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i800 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i800NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i801 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i801NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i802 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i802NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i803 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM i803NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M2100 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M2100NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M2200 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M2200NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M969 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM M969NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) EU Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RM1224 LTE(4G) NAM Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC30 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC30NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC8388 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC8388 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC8388NC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RMC8388NC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX MX5000 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX MX5000RE Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1400 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1500 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1501 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1510 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1511 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1512 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1524 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX1536 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM ROX RX5000 Affected: 0 , < V2.17.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RP110 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RP110NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600F Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600FNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600T Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS1600TNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS400 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS400NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS401 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS401NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416NCv2 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416NCv2 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416P Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416PNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416PNCv2 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416PNCv2 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416Pv2 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416Pv2 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416v2 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS416v2 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000A Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000ANC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000H Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000HNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000T Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS8000TNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900 (32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900 (32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900G Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900G (32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900G (32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900GNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900GNC(32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900GNC(32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900GP Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900GPNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900L Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900LNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900M-GETS-C01 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900M-GETS-XX Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900M-STND-C01 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900M-STND-XX Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900MNC-GETS-C01 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900MNC-GETS-XX Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900MNC-STND-XX Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900MNC-STND-XX-C01 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900NC(32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900NC(32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS900W Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS910 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS910L Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS910LNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS910NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS910W Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS920L Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS920LNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS920W Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS930L Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS930LNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS930W Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS940G Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS940GNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS969 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RS969NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100 (32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100 (32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100NC(32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100NC(32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100P Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100P (32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100P (32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100PNC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100PNC (32M) V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2100PNC (32M) V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2200 Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2200NC Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2288 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2288 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2288NC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2288NC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300NC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300NC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300P V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300P V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300PNC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2300PNC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2488 V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2488 V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2488NC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG2488NC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG907R Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG908C Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG909R Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG910C Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG920P V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG920P V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG920PNC V4.X Affected: 0 , < V4.3.11 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSG920PNC V5.X Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSL910 Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RSL910NC Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RST2228 Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RST2228P Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RST2428P Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RST916C Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens RUGGEDCOM RST916P Affected: 0 , < V5.10.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M804PB Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M812-1 ADSL-Router Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M816-1 ADSL-Router Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M826-2 SHDSL-Router Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-2 Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M874-3 3G-Router (CN) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-3 (ROK) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (EU) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE M876-4 (NAM) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (A1) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (B1) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM853-1 (EU) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (A1) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (B1) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (CN) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (EU) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE MUM856-1 (RoW) Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 EEC LAN-Router Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE S615 LAN-Router Affected: 0 , < V8.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC622-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC626-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC632-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC636-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC642-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE SC646-2C Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1748-1 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-1 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2 EEC M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2 M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W1788-2IA M12 Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE W721-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W722-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W734-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W734-1 RJ45 (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W738-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W748-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W748-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W761-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W774-1 RJ45 (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W778-1 M12 EEC (USA) Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2 SFP Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W786-2IA RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-1 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-1 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 M12 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 M12 EEC Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE W788-2 RJ45 Affected: 0 , < V6.6.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAB762-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (ME) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM763-1 (US) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (ME) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 (US) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (ME) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WAM766-1 EEC (US) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUB762-1 iFeatures Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM763-1 (US) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (ME) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE WUM766-1 (USA) Affected: 0 , < V3.0.0 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (230V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (24V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 230V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X302-7 EEC (2x 24V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X304-2FE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X306-1LD FE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (230V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (24V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 230V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V, coated) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-2 EEC (2x 24V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3 Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X307-3LD Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2 Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LD Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2LH+ Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M PoE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X308-2M TS Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310 Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X310FE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1 FE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X320-1-2LD FE Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE X408-2 Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB205-3 (SC, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB205-3 (ST, E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB205-3 (ST, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB205-3LD (SC, E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB205-3LD (SC, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2 (SC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2 (ST/BFOC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2 LD Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2 SC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2 ST Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB206-2LD Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB208 (E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB208 (PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3 (SC, E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3 (SC, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3 (ST, E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3 (ST, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3LD (SC, E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB213-3LD (SC, PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB216 (E/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XB216 (PN) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2 (SC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2 (ST/BFOC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2G PoE Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2G PoE (54 V DC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2G PoE EEC (54 V DC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2SFP Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2SFP EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2SFP G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2SFP G (EIP DEF.) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC206-2SFP G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208G (EIP def.) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208G PoE Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC208G PoE (54 V DC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-3G PoE Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-3G PoE (54 V DC) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-4C Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-4C G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-4C G (EIP Def.) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216-4C G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC216EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC224 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC224-4C G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC224-4C G (EIP Def.) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC224-4C G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC316-8 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC324-4 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC324-4 EEC Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC332 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC416-8 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC424-4 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XC432 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XCH328 Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XCM324 Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XCM328 Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XCM332 Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204 DNA Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204-2BA Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204-2BA DNA Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XF204G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-4C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-4C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-8C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM408-8C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM416-4C Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XM416-4C (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208 (Ethernet/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208G PoE EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208G PP Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP208PoE EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216 (Ethernet/IP) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216 (V2) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216EEC (V2) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216G Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216G EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216G PoE EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216POE EEC Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XP216PoE EEC (V2) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR302-32 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR322-12 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (230V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M (24V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-12M TS (24V) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (24V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M EEC (2x 24V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (230V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE (24V, ports on rear) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324-4M PoE TS (24V, ports on front) Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324WG (24 x FE, AC 230V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR324WG (24 X FE, DC 24V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-2C PoE WG Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-2C PoE WG (without UL) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-8 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR326-8 EEC Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR328-4C WG (24XFE, 4XGE, 24V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR328-4C WG (24xFE,4xGE,AC230V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR328-4C WG (28xGE, AC 230V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR328-4C WG (28xGE, DC 24V) Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR502-32 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR522-12 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 1x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 1x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 24V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 24V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 2x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8C, 2x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR524-8WG Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8 Affected: 0 , < V1.3 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 1x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 1x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 24V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 24V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 2x230V Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR526-8C, 2x230V (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (2HR2, L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (2HR2) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR528-6M (L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M (2HR2, L3 int.) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XR552-12M (2HR2) Affected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (230 V AC, 12xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (230 V AC, 8xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (24 V DC, 12xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (24 V DC, 8xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (2x230 V AC, 12xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (2x230 V AC, 8xFO) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) Affected: 0 , < V3.2 (custom)
    		Create a notification for this product.
    Siemens SICAM AK 3 Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SICAM BC Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SICAM GridEdge (Classic) Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SICAM GridEdge Applications for SICAM 8 Platform Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SICAM GridPass Affected: 0 , < V2.50 (custom)
    		Create a notification for this product.
    Siemens SICAM TM Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SICORE Base system Affected: 0 , < V2.20.0 (custom)
    		Create a notification for this product.
    Siemens SINEC INS Affected: 0 , < V1.0 SP2 Update 4 (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE X308-2 Affected: 0 , < V4.1.9 (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE XC206-2 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE XC206-2SFP Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE XC208 Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SIPLUS NET SCALANCE XC216-4C Affected: 0 , < V4.6 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 - CP200 Devices Unaffected: 0 , < * (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MD84 (CP300) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MD85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MD86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MD89 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MD89 (CP300) V9.6x Affected: 0 , < V9.68 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 6MU85 (CP300) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7KE85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SA82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SA82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SA86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SA87 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SD82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SD82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SD86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SD87 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ81 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ81 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SJ86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SK82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SK82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SK85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SL82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SL82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SL86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SL87 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SS85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7ST85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7ST85 (CP300) V9.6x Affected: 0 , < V9.68 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7ST86 (CP300) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7ST86 (CP300) V9.8x Affected: 0 , < V9.83 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SX82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SX85 (CP300) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7SY82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UM85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UT82 (CP100) Affected: V7.80 , < V8.90 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UT82 (CP150) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UT85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UT86 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7UT87 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7VE85 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7VK87 (CP300) Affected: V7.80 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 7VU85 (CP300) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Siemens SIPROTEC 5 Compact 7SX800 (CP050) Affected: 0 , < V10.0 (custom)
    		Create a notification for this product.
    Credits
    Thanks to Sharon Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl who researched and reported this vulnerability
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:ietf:rfc:2865:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rfc",
            "vendor": "ietf",
            "versions": [
              {
                "status": "affected",
                "version": "2865"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-3596",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-11T03:55:37.141738Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-04T21:05:25.373Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T17:20:52.225Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20240822-0001/"
          },
          {
            "url": "https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://datatracker.ietf.org/doc/html/rfc2865"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.blastradius.fail/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/07/09/4"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014"
          },
          {
            "url": "https://www.kb.cert.org/vuls/id/456537"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "CPC80 Central Processing/Communication",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V16.51",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "CPCI85 Central Processing/Communication",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.20",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "POWER METER SICAM Q100 family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.70",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "POWER METER SICAM Q200 family",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.83",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "Powerlink IP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.22",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM APE1808",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM APE1808",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM CROSSBOW",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i800",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i800NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i801",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i801NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i802",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i802NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i803",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM i803NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M2100",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M2100NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M2200",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M2200NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M969",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM M969NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RM1224 LTE(4G) EU",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RM1224 LTE(4G) NAM",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC30",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC30NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC8388 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC8388 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC8388NC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RMC8388NC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX MX5000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX MX5000RE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1400",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1500",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1501",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1510",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1511",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1512",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1524",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX1536",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM ROX RX5000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.17.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RP110",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RP110NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600F",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600FNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600T",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS1600TNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS400",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS400NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS401",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS401NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416NCv2 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416NCv2 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416PNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416PNCv2 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416PNCv2 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416Pv2 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416Pv2 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416v2 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS416v2 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000A",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000ANC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000H",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000HNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000T",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS8000TNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900 (32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900 (32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900G (32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900G (32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900GNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900GNC(32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900GNC(32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900GP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900GPNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900L",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900LNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900M-GETS-C01",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900M-GETS-XX",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900M-STND-C01",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900M-STND-XX",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900MNC-GETS-C01",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900MNC-GETS-XX",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900MNC-STND-XX",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900MNC-STND-XX-C01",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900NC(32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900NC(32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS900W",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS910",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS910L",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS910LNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS910NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS910W",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS920L",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS920LNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS920W",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS930L",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS930LNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS930W",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS940G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS940GNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS969",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RS969NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100 (32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100 (32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100NC(32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100NC(32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100P (32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100P (32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100PNC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100PNC (32M) V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2100PNC (32M) V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2200",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2200NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2288 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2288 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2288NC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2288NC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300NC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300NC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300P V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300P V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300PNC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2300PNC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2488 V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2488 V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2488NC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG2488NC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG907R",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG908C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG909R",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG910C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG920P V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG920P V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG920PNC V4.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSG920PNC V5.X",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSL910",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RSL910NC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST2228",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST2228P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST2428P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST916C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM RST916P",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M804PB",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M812-1 ADSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M812-1 ADSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M816-1 ADSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M816-1 ADSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M826-2 SHDSL-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M874-3 3G-Router (CN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-3 (ROK)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE M876-4 (NAM)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (A1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (B1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM853-1 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (A1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (B1)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (CN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (EU)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE MUM856-1 (RoW)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE S615 EEC LAN-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE S615 LAN-Router",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC622-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC626-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC632-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC636-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC642-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE SC646-2C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2 EEC M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W1788-2IA M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W721-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W722-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W734-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W738-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W748-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W761-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W774-1 RJ45 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W778-1 M12 EEC (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2 SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W786-2IA RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-1 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 M12 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE W788-2 RJ45",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V6.6.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAB762-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WAM766-1 EEC (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUB762-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUB762-1 iFeatures",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM763-1 (US)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1 (ME)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE WUM766-1 (USA)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.0.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X302-7 EEC (2x 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X304-2FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X306-1LD FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 230V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 24V, coated)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-2 EEC (2x 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X307-3LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH+",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2LH+",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X308-2M TS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X310FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X320-1 FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X320-1-2LD FE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE X408-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3 (SC, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3 (ST, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3 (ST, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3 (ST, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3LD (SC, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB205-3LD (SC, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2 (SC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2 (ST/BFOC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2 LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2 SC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2 ST",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB206-2LD",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB208 (E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB208 (PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3 (SC, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3 (SC, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3 (ST, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3 (ST, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3LD (SC, E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB213-3LD (SC, PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB216 (E/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XB216 (PN)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2 (SC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2 (ST/BFOC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2G PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2G PoE (54 V DC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2G PoE EEC (54 V DC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2SFP EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2SFP G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2SFP G (EIP DEF.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC206-2SFP G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208G (EIP def.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208G PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC208G PoE (54 V DC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-3G PoE",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-3G PoE (54 V DC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-4C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-4C G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-4C G (EIP Def.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216-4C G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC216EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC224",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC224-4C G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC224-4C G (EIP Def.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC224-4C G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC316-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC324-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC324-4 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC332",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC416-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC424-4",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XC432",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XCH328",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XCM324",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XCM328",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XCM332",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204 DNA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204-2BA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204-2BA DNA",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XF204G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM408-4C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM408-4C (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM408-8C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM408-8C (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM416-4C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XM416-4C (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208 (Ethernet/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208G PoE EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208G PP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208PoE EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP208PoE EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216 (Ethernet/IP)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216 (V2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216EEC (V2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216G EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216G PoE EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216POE EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XP216PoE EEC (V2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR302-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR322-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M TS (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-12M TS (24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 100-240VAC/60-250VDC, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M EEC (2x 24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (230V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE (24V, ports on rear)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324-4M PoE TS (24V, ports on front)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324WG (24 x FE, AC 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR324WG (24 X FE, DC 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-2C PoE WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-2C PoE WG (without UL)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR326-8 EEC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (24XFE, 4XGE, 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (24xFE, 4xGE,DC24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (24xFE,4xGE,AC230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (28xGE, AC 230V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR328-4C WG (28xGE, DC 24V)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR502-32",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR522-12",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 1x230V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 1x230V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 24V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 24V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 2x230V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8C, 2x230V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR524-8WG",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.3",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 1x230V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 1x230V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 24V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 24V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 2x230V",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR526-8C, 2x230V (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR528-6M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR528-6M (2HR2, L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR528-6M (2HR2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR528-6M (L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR552-12M",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR552-12M (2HR2, L3 int.)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR552-12M (2HR2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XR552-12M (2HR2)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRH334 (24 V DC, 8xFO, CC)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (230 V AC, 12xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (230 V AC, 8xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (24 V DC, 12xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (24 V DC, 8xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (2x230 V AC, 12xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (2x230 V AC, 8xFO)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V3.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM AK 3",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM BC",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM GridEdge (Classic)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM GridEdge Applications for SICAM 8 Platform",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM GridPass",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.50",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICAM TM",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SICORE Base system",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V2.20.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SINEC INS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.0 SP2 Update 4",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE X308-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.1.9",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE XC206-2",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE XC206-2SFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE XC208",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS NET SCALANCE XC216-4C",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V4.6",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 - CP200 Devices",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MD84 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MD85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MD86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MD89 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MD89 (CP300) V9.6x",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V9.68",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 6MU85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7KE85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SA82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SA82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SA86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SA87 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SD82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SD82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SD86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SD87 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ81 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ81 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SJ86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SK82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SK82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SK85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SL82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SL82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SL86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SL87 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SS85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7ST85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7ST85 (CP300) V9.6x",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V9.68",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7ST86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7ST86 (CP300) V9.8x",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V9.83",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SX82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SX85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7SY82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UM85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UT82 (CP100)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V8.90",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UT82 (CP150)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UT85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UT86 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7UT87 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7VE85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7VK87 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "V7.80",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 7VU85 (CP300)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPROTEC 5 Compact 7SX800 (CP050)",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V10.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-09T09:01:52.617Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-364175.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-723487.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-770770.html"
          },
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-794185.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "RFC",
          "vendor": "IETF",
          "versions": [
            {
              "status": "affected",
              "version": "2865"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Thanks to Sharon Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl who researched and reported this vulnerability"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-328: Use of Weak Hash",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
              "lang": "en"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-09-03T17:29:16.788Z",
        "orgId": "37e5125f-f79b-445b-8fad-9564f167944b",
        "shortName": "certcc"
      },
      "references": [
        {
          "url": "https://datatracker.ietf.org/doc/html/rfc2865"
        },
        {
          "url": "https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/"
        },
        {
          "url": "https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf"
        },
        {
          "url": "https://www.blastradius.fail/"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2024/07/09/4"
        },
        {
          "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014"
        },
        {
          "name": "Siemens Security Advisory by Siemens ProductCERT for  SIPROTEC, SICAM and related product",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-794185.html"
        },
        {
          "name": "Siemens Security Advisory by Siemens ProductCERT to SCALANCE, RUGGEDCOM and related products.",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://cert-portal.siemens.com/productcert/html/ssa-723487.html"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.",
      "x_generator": {
        "engine": "VINCE 3.0.4",
        "env": "prod",
        "origin": "https://cveawg.mitre.org/api/cve/CVE-2024-3596"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b",
    "assignerShortName": "certcc",
    "cveId": "CVE-2024-3596",
    "datePublished": "2024-07-09T12:02:53.001Z",
    "dateReserved": "2024-04-10T15:09:45.391Z",
    "dateUpdated": "2026-06-09T09:01:52.617Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2022-41861 (GCVE-0-2022-41861)

    Vulnerability from cvelistv5 – Published: 2023-01-17 00:00 – Updated: 2025-11-03 19:27
    VLAI
    Summary
    A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
    Severity
    6.5 (Medium)
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    n/a freeradius Affected: All versions from 0.0.1 to 3.0.25
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:27:40.244Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/commit/0ec2b39d260e"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-41861",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T16:27:46.890633Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T16:28:17.085Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "freeradius",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "All versions from 0.0.1 to 3.0.25"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-400",
              "description": "CWE-400",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-17T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://freeradius.org/security/"
        },
        {
          "url": "https://github.com/FreeRADIUS/freeradius-server/commit/0ec2b39d260e"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-41861",
    "datePublished": "2023-01-17T00:00:00.000Z",
    "dateReserved": "2022-09-30T00:00:00.000Z",
    "dateUpdated": "2025-11-03T19:27:40.244Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2022-41860 (GCVE-0-2022-41860)

    Vulnerability from cvelistv5 – Published: 2023-01-17 00:00 – Updated: 2025-11-03 19:27
    VLAI
    Summary
    In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    n/a freeradius Affected: All versions from 0.9.3 to 3.0.25
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:27:38.875Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/commit/f1cdbb33ec61c4a64a"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-41860",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T16:39:17.283850Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T16:39:35.420Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "freeradius",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "All versions from 0.9.3 to 3.0.25"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-17T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://freeradius.org/security/"
        },
        {
          "url": "https://github.com/FreeRADIUS/freeradius-server/commit/f1cdbb33ec61c4a64a"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-41860",
    "datePublished": "2023-01-17T00:00:00.000Z",
    "dateReserved": "2022-09-30T00:00:00.000Z",
    "dateUpdated": "2025-11-03T19:27:38.875Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2022-41859 (GCVE-0-2022-41859)

    Vulnerability from cvelistv5 – Published: 2023-01-17 00:00 – Updated: 2025-11-03 19:27
    VLAI
    Summary
    In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
    Severity
    7.5 (High)
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    n/a freeradius Affected: unknown
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:27:37.502Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/commit/9e5e8f2f"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00030.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-41859",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-07T16:40:02.278497Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-07T16:40:36.415Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "freeradius",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-01-17T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://freeradius.org/security/"
        },
        {
          "url": "https://github.com/FreeRADIUS/freeradius-server/commit/9e5e8f2f"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2022-41859",
    "datePublished": "2023-01-17T00:00:00.000Z",
    "dateReserved": "2022-09-30T00:00:00.000Z",
    "dateUpdated": "2025-11-03T19:27:37.502Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2019-17185 (GCVE-0-2019-17185)

    Vulnerability from cvelistv5 – Published: 2020-03-21 00:13 – Updated: 2024-08-05 01:33
    VLAI
    Summary
    In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T01:33:17.262Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20"
          },
          {
            "name": "openSUSE-SU-2020:0553",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-26T17:06:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/security/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20"
        },
        {
          "name": "openSUSE-SU-2020:0553",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-17185",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://freeradius.org/security/",
              "refsource": "MISC",
              "url": "https://freeradius.org/security/"
            },
            {
              "name": "https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20",
              "refsource": "CONFIRM",
              "url": "https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20"
            },
            {
              "name": "openSUSE-SU-2020:0553",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-17185",
    "datePublished": "2020-03-21T00:13:05.000Z",
    "dateReserved": "2019-10-04T00:00:00.000Z",
    "dateUpdated": "2024-08-05T01:33:17.262Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2015-9542 (GCVE-0-2015-9542)

    Vulnerability from cvelistv5 – Published: 2020-02-24 14:14 – Updated: 2024-08-06 08:51
    VLAI
    Summary
    add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    https://github.com/FreeRADIUS/pam_radius/commit/0… x_refsource_MISC
    https://lists.debian.org/debian-lts-announce/2020… mailing-listx_refsource_MLIST
    https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2… x_refsource_CONFIRM
    https://usn.ubuntu.com/4290-1/ vendor-advisoryx_refsource_UBUNTU
    https://usn.ubuntu.com/4290-2/ vendor-advisoryx_refsource_UBUNTU
    https://lists.debian.org/debian-lts-announce/2020… mailing-listx_refsource_MLIST
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:51:05.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb1e0d96c06c3ffa0b14d36d0"
          },
          {
            "name": "[debian-lts-announce] 20200222 [SECURITY] [DLA 2116-1] libpam-radius-auth security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00023.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-9542"
          },
          {
            "name": "USN-4290-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4290-1/"
          },
          {
            "name": "USN-4290-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4290-2/"
          },
          {
            "name": "[debian-lts-announce] 20200801 [SECURITY] [DLA 2304-1] libpam-radius-auth security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00000.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-08-01T19:06:06.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb1e0d96c06c3ffa0b14d36d0"
        },
        {
          "name": "[debian-lts-announce] 20200222 [SECURITY] [DLA 2116-1] libpam-radius-auth security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00023.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-9542"
        },
        {
          "name": "USN-4290-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4290-1/"
        },
        {
          "name": "USN-4290-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/4290-2/"
        },
        {
          "name": "[debian-lts-announce] 20200801 [SECURITY] [DLA 2304-1] libpam-radius-auth security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00000.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-9542",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb1e0d96c06c3ffa0b14d36d0",
              "refsource": "MISC",
              "url": "https://github.com/FreeRADIUS/pam_radius/commit/01173ec2426627dbb1e0d96c06c3ffa0b14d36d0"
            },
            {
              "name": "[debian-lts-announce] 20200222 [SECURITY] [DLA 2116-1] libpam-radius-auth security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/02/msg00023.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-9542",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-9542"
            },
            {
              "name": "USN-4290-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4290-1/"
            },
            {
              "name": "USN-4290-2",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/4290-2/"
            },
            {
              "name": "[debian-lts-announce] 20200801 [SECURITY] [DLA 2304-1] libpam-radius-auth security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00000.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-9542",
    "datePublished": "2020-02-24T14:14:13.000Z",
    "dateReserved": "2020-02-11T00:00:00.000Z",
    "dateUpdated": "2024-08-06T08:51:05.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2019-13456 (GCVE-0-2019-13456)

    Vulnerability from cvelistv5 – Published: 2019-12-03 19:53 – Updated: 2024-08-04 23:49
    VLAI
    Summary
    In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T23:49:25.031Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://wpa3.mathyvanhoef.com"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737663"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa"
          },
          {
            "name": "openSUSE-SU-2020:0553",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the \"Dragonblood\" attack and CVE-2019-9494."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-26T17:06:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/security/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://wpa3.mathyvanhoef.com"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737663"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa"
        },
        {
          "name": "openSUSE-SU-2020:0553",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-13456",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the \"Dragonblood\" attack and CVE-2019-9494."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://freeradius.org/security/",
              "refsource": "MISC",
              "url": "https://freeradius.org/security/"
            },
            {
              "name": "https://wpa3.mathyvanhoef.com",
              "refsource": "MISC",
              "url": "https://wpa3.mathyvanhoef.com"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1737663",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1737663"
            },
            {
              "name": "https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa",
              "refsource": "CONFIRM",
              "url": "https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa"
            },
            {
              "name": "openSUSE-SU-2020:0553",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-13456",
    "datePublished": "2019-12-03T19:53:53.000Z",
    "dateReserved": "2019-07-09T00:00:00.000Z",
    "dateUpdated": "2024-08-04T23:49:25.031Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2019-10143 (GCVE-0-2019-10143)

    Vulnerability from cvelistv5 – Published: 2019-05-24 00:00 – Updated: 2024-08-04 22:10 Disputed
    VLAI
    Summary
    It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."
    Severity
    6.4 (Medium)
    CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: poc Automatable: no Technical Impact: total
    CISA Coordinator (v2.0.3)
    CWE
    Assigner
    References
    Impacted products
    Vendor Product Version
    freeradius freeradius Affected: affects <= 3.0.19
    		Create a notification for this product.
    freeradius freeradius Affected: 0 , ≤ 3.0.19 (custom)
        cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*
    		 Create a notification for this product.
    fedoraproject fedora Affected: 30
        cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
    		 Create a notification for this product.
    fedoraproject fedora Affected: 29
        cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
    		 Create a notification for this product.
    redhat enterprise_linux Affected: 8.0
        cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
    		 Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "freeradius",
            "vendor": "freeradius",
            "versions": [
              {
                "lessThanOrEqual": "3.0.19",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fedora",
            "vendor": "fedoraproject",
            "versions": [
              {
                "status": "affected",
                "version": "30"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fedora",
            "vendor": "fedoraproject",
            "versions": [
              {
                "status": "affected",
                "version": "29"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "enterprise_linux",
            "vendor": "redhat",
            "versions": [
              {
                "status": "affected",
                "version": "8.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-10143",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-01T19:23:06.388705Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-01T19:24:21.005Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:10:10.031Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2019-4a8eeaf80e",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TKODLHHUOVAYENTBP4D3N25ST3Q6LJBP/"
          },
          {
            "name": "FEDORA-2019-9454ce61b2",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6VKBZAZKJP5QKXDXRKCM2ZPZND3TFAX/"
          },
          {
            "name": "RHSA-2019:3353",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:3353"
          },
          {
            "name": "20191115 [AIT-SA-20191112-01] CVE-2019-10143: Privilege Escalation via Logrotate in FreeRadius",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2019/Nov/14"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/155361/FreeRadius-3.0.19-Logrotate-Privilege-Escalation.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10143"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/FreeRADIUS/freeradius-server/pull/2666"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "freeradius",
          "vendor": "freeradius",
          "versions": [
            {
              "status": "affected",
              "version": "affects \u003c= 3.0.19"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated \"there is simply no way for anyone to gain privileges through this alleged issue.\""
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "CWE-266",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-250",
              "description": "CWE-250",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-02-12T00:00:00.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "FEDORA-2019-4a8eeaf80e",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TKODLHHUOVAYENTBP4D3N25ST3Q6LJBP/"
        },
        {
          "name": "FEDORA-2019-9454ce61b2",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6VKBZAZKJP5QKXDXRKCM2ZPZND3TFAX/"
        },
        {
          "name": "RHSA-2019:3353",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:3353"
        },
        {
          "name": "20191115 [AIT-SA-20191112-01] CVE-2019-10143: Privilege Escalation via Logrotate in FreeRadius",
          "tags": [
            "mailing-list"
          ],
          "url": "http://seclists.org/fulldisclosure/2019/Nov/14"
        },
        {
          "url": "https://freeradius.org/security/"
        },
        {
          "url": "http://packetstormsecurity.com/files/155361/FreeRadius-3.0.19-Logrotate-Privilege-Escalation.html"
        },
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10143"
        },
        {
          "url": "https://github.com/FreeRADIUS/freeradius-server/pull/2666"
        }
      ],
      "tags": [
        "disputed"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-10143",
    "datePublished": "2019-05-24T00:00:00.000Z",
    "dateReserved": "2019-03-27T00:00:00.000Z",
    "dateUpdated": "2024-08-04T22:10:10.031Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2019-11235 (GCVE-0-2019-11235)

    Vulnerability from cvelistv5 – Published: 2019-04-21 16:40 – Updated: 2024-08-04 22:48
    VLAI
    Summary
    FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used" protection mechanism, aka a "Dragonblood" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:48:08.973Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/871675/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695748"
          },
          {
            "name": "USN-3954-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3954-1/"
          },
          {
            "name": "openSUSE-SU-2019:1346",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
          },
          {
            "name": "RHSA-2019:1131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1131"
          },
          {
            "name": "RHSA-2019:1142",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1142"
          },
          {
            "name": "openSUSE-SU-2019:1394",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
          },
          {
            "name": "openSUSE-SU-2020:0542",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRADIUS before 3.0.19 mishandles the \"each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used\" protection mechanism, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-23T15:06:24.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kb.cert.org/vuls/id/871675/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/security/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695748"
        },
        {
          "name": "USN-3954-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3954-1/"
        },
        {
          "name": "openSUSE-SU-2019:1346",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
        },
        {
          "name": "RHSA-2019:1131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1131"
        },
        {
          "name": "RHSA-2019:1142",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1142"
        },
        {
          "name": "openSUSE-SU-2019:1394",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
        },
        {
          "name": "openSUSE-SU-2020:0542",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-11235",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "FreeRADIUS before 3.0.19 mishandles the \"each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used\" protection mechanism, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19",
              "refsource": "MISC",
              "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
            },
            {
              "name": "https://papers.mathyvanhoef.com/dragonblood.pdf",
              "refsource": "MISC",
              "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
            },
            {
              "name": "https://www.kb.cert.org/vuls/id/871675/",
              "refsource": "MISC",
              "url": "https://www.kb.cert.org/vuls/id/871675/"
            },
            {
              "name": "https://freeradius.org/security/",
              "refsource": "MISC",
              "url": "https://freeradius.org/security/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1695748",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695748"
            },
            {
              "name": "USN-3954-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3954-1/"
            },
            {
              "name": "openSUSE-SU-2019:1346",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
            },
            {
              "name": "RHSA-2019:1131",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1131"
            },
            {
              "name": "RHSA-2019:1142",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1142"
            },
            {
              "name": "openSUSE-SU-2019:1394",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
            },
            {
              "name": "openSUSE-SU-2020:0542",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-11235",
    "datePublished": "2019-04-21T16:40:32.000Z",
    "dateReserved": "2019-04-15T00:00:00.000Z",
    "dateUpdated": "2024-08-04T22:48:08.973Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2019-11234 (GCVE-0-2019-11234)

    Vulnerability from cvelistv5 – Published: 2019-04-21 16:36 – Updated: 2024-08-04 22:48
    VLAI
    Summary
    FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T22:48:08.954Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/871675/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeradius.org/security/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695783"
          },
          {
            "name": "USN-3954-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3954-1/"
          },
          {
            "name": "openSUSE-SU-2019:1346",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
          },
          {
            "name": "RHSA-2019:1131",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1131"
          },
          {
            "name": "RHSA-2019:1142",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:1142"
          },
          {
            "name": "openSUSE-SU-2019:1394",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
          },
          {
            "name": "openSUSE-SU-2020:0542",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9497."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-04-23T15:06:23.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.kb.cert.org/vuls/id/871675/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeradius.org/security/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695783"
        },
        {
          "name": "USN-3954-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3954-1/"
        },
        {
          "name": "openSUSE-SU-2019:1346",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
        },
        {
          "name": "RHSA-2019:1131",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1131"
        },
        {
          "name": "RHSA-2019:1142",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:1142"
        },
        {
          "name": "openSUSE-SU-2019:1394",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
        },
        {
          "name": "openSUSE-SU-2020:0542",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2019-11234",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9497."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19",
              "refsource": "MISC",
              "url": "https://freeradius.org/release_notes/?br=3.0.x\u0026re=3.0.19"
            },
            {
              "name": "https://papers.mathyvanhoef.com/dragonblood.pdf",
              "refsource": "MISC",
              "url": "https://papers.mathyvanhoef.com/dragonblood.pdf"
            },
            {
              "name": "https://www.kb.cert.org/vuls/id/871675/",
              "refsource": "MISC",
              "url": "https://www.kb.cert.org/vuls/id/871675/"
            },
            {
              "name": "https://freeradius.org/security/",
              "refsource": "MISC",
              "url": "https://freeradius.org/security/"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1695783",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1695783"
            },
            {
              "name": "USN-3954-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3954-1/"
            },
            {
              "name": "openSUSE-SU-2019:1346",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html"
            },
            {
              "name": "RHSA-2019:1131",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1131"
            },
            {
              "name": "RHSA-2019:1142",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2019:1142"
            },
            {
              "name": "openSUSE-SU-2019:1394",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html"
            },
            {
              "name": "openSUSE-SU-2020:0542",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2019-11234",
    "datePublished": "2019-04-21T16:36:48.000Z",
    "dateReserved": "2019-04-15T00:00:00.000Z",
    "dateUpdated": "2024-08-04T22:48:08.954Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}