conversion for icscert records

Signed-off-by: Weston Steimel <[email protected]>
anchore · May 20, 2024 · a394dbe · a394dbe
1 parent 26011a9
commit a394dbe
Show file tree

Hide file tree

Showing 20 changed files with 742 additions and 0 deletions.
diff --git a/data/anchore/2024/CVE-2024-0257.json b/data/anchore/2024/CVE-2024-0257.json
@@ -0,0 +1,32 @@
+{
+  "additionalMetadata": {
+    "cna": "icscert",
+    "cveId": "CVE-2024-0257",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-04"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:robodk:robodk:*:*:*:*:*:*:*:*"
+        ],
+        "product": "RoboDK",
+        "vendor": "RoboDK",
+        "versions": [
+          {
+            "status": "affected",
+            "version": "5.5.4",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-0860.json b/data/anchore/2024/CVE-2024-0860.json
@@ -0,0 +1,51 @@
+{
+  "additionalMetadata": {
+    "cna": "icscert",
+    "cveId": "CVE-2024-0860",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-13"
+    ],
+    "solutions": [
+      "\nUpdate Softing edgeConnector and edgeAggregator to v3.70 or greater.\n"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:softing:edgeconnector:*:*:*:*:*:*:*:*"
+        ],
+        "product": "edgeConnector",
+        "vendor": "Softing",
+        "versions": [
+          {
+            "lessThan": "3.70",
+            "status": "affected",
+            "version": "3.60",
+            "versionType": "custom"
+          }
+        ]
+      },
+      {
+        "cpes": [
+          "cpe:2.3:a:softing:edgeaggregator:*:*:*:*:*:*:*:*"
+        ],
+        "product": "edgeAggregator",
+        "vendor": "Softing",
+        "versions": [
+          {
+            "lessThan": "3.70",
+            "status": "affected",
+            "version": "3.60",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-1453.json b/data/anchore/2024/CVE-2024-1453.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "icscert",
+    "cveId": "CVE-2024-1453",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-058-01"
+    ],
+    "solutions": [
+      "\nSantesoft released an updated version of their product and recommends updating Sante DICOM Viewer Pro to  v14.0.4 https://santesoft.com/win/sante-dicom-viewer-pro/download.html  or later.\n\n\n"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:santesoft:dicom_viewer_pro:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Sante DICOM Viewer Pro",
+        "vendor": "Santesoft",
+        "versions": [
+          {
+            "lessThan": "14.0.4",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-1696.json b/data/anchore/2024/CVE-2024-1696.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "icscert",
+    "cveId": "CVE-2024-1696",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-065-01"
+    ],
+    "solutions": [
+      "\nSantesoft released an updated version of their product and recommends users update Sante FFT Imaging to  v1.4.2 https://santesoft.com/win/sante-fft-imaging/download.html  or later.\n\n\n"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:santesoft:fft_imaging:*:*:*:*:*:*:*:*"
+        ],
+        "product": "Sante FFT Imaging",
+        "vendor": "Santesoft",
+        "versions": [
+          {
+            "lessThan": "1.4.2",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-23494.json b/data/anchore/2024/CVE-2024-23494.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "icscert",
+    "cveId": "CVE-2024-23494",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12"
+    ],
+    "solutions": [
+      "\nDelta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from  Delta Electronics' regional sales or agents https://www.deltaww.com/en/customerService .\n\n"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:deltaww:diaenergie:*:*:*:*:*:*:*:*"
+        ],
+        "product": "DIAEnergie",
+        "vendor": "Delta Electronics",
+        "versions": [
+          {
+            "lessThan": "1.10.00.005",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-23975.json b/data/anchore/2024/CVE-2024-23975.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "icscert",
+    "cveId": "CVE-2024-23975",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12"
+    ],
+    "solutions": [
+      "\nDelta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from  Delta Electronics' regional sales or agents https://www.deltaww.com/en/customerService .\n\n"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:deltaww:diaenergie:*:*:*:*:*:*:*:*"
+        ],
+        "product": "DIAEnergie",
+        "vendor": "Delta Electronics",
+        "versions": [
+          {
+            "lessThan": "1.10.00.005",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-2453.json b/data/anchore/2024/CVE-2024-2453.json
@@ -0,0 +1,37 @@
+{
+  "additionalMetadata": {
+    "cna": "icscert",
+    "cveId": "CVE-2024-2453",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.cisa.gov/news-events/ics-advisories/icsa-24-081-01"
+    ],
+    "solutions": [
+      "\nAdvantech recommends updating WebAccess/SCADA to version 9.1.6 or higher to mitigate this vulnerability.\n\n"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:advantech:webaccess:*:*:*:*:*:*:*:*",
+          "cpe:2.3:a:advantech:webaccess\\/scada:*:*:*:*:*:*:*:*"
+        ],
+        "product": "WebAccess/SCADA",
+        "vendor": "Advantech",
+        "versions": [
+          {
+            "lessThan": "9.1.6",
+            "status": "affected",
+            "version": "9.1.5u",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-25567.json b/data/anchore/2024/CVE-2024-25567.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "icscert",
+    "cveId": "CVE-2024-25567",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12"
+    ],
+    "solutions": [
+      "\nDelta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from  Delta Electronics' regional sales or agents https://www.deltaww.com/en/customerService .\n\n"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:deltaww:diaenergie:*:*:*:*:*:*:*:*"
+        ],
+        "product": "DIAEnergie",
+        "vendor": "Delta Electronics",
+        "versions": [
+          {
+            "lessThan": "1.10.00.005",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-25574.json b/data/anchore/2024/CVE-2024-25574.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "icscert",
+    "cveId": "CVE-2024-25574",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12"
+    ],
+    "solutions": [
+      "\nDelta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from  Delta Electronics' regional sales or agents https://www.deltaww.com/en/customerService .\n\n"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:deltaww:diaenergie:*:*:*:*:*:*:*:*"
+        ],
+        "product": "DIAEnergie",
+        "vendor": "Delta Electronics",
+        "versions": [
+          {
+            "lessThan": "1.10.00.005",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}
diff --git a/data/anchore/2024/CVE-2024-25937.json b/data/anchore/2024/CVE-2024-25937.json
@@ -0,0 +1,36 @@
+{
+  "additionalMetadata": {
+    "cna": "icscert",
+    "cveId": "CVE-2024-25937",
+    "reason": "Added CPE configurations because not yet analyzed by NVD.",
+    "references": [
+      "https://www.cisa.gov/news-events/ics-advisories/icsa-24-074-12"
+    ],
+    "solutions": [
+      "\nDelta recommends users update to DIAEnergie v1.10.00.005. Users can request this version of DIAEnergie from  Delta Electronics' regional sales or agents https://www.deltaww.com/en/customerService .\n\n"
+    ]
+  },
+  "adp": {
+    "affected": [
+      {
+        "cpes": [
+          "cpe:2.3:a:deltaww:diaenergie:*:*:*:*:*:*:*:*"
+        ],
+        "product": "DIAEnergie",
+        "vendor": "Delta Electronics",
+        "versions": [
+          {
+            "lessThan": "1.10.00.005",
+            "status": "affected",
+            "version": "0",
+            "versionType": "custom"
+          }
+        ]
+      }
+    ],
+    "providerMetadata": {
+      "orgId": "00000000-0000-4000-8000-000000000000",
+      "shortName": "anchoreadp"
+    }
+  }
+}