<?xml version="1.0" encoding="UTF-8"?>
<VULDEF-Document
    version="3.2"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns="http://jvn.jp/vuldef/"
    xmlns:vuldef="http://jvn.jp/vuldef/"
    xmlns:status="http://jvndb.jvn.jp/myjvn/Status"
    xmlns:sec="http://jvn.jp/rss/mod_sec/3.0/"
    xmlns:marking="http://data-marking.mitre.org/Marking-1"
    xmlns:tlpMarking="http://data-marking.mitre.org/extensions/MarkingStructure#TLP-1"
    xsi:schemaLocation="http://jvn.jp/vuldef/ https://jvndb.jvn.jp/schema/vuldef_3.2.xsd"
    xml:lang="en">
  <Vulinfo>
    <VulinfoID>JVNDB-2024-123456</VulinfoID>
    <VulinfoData>
      <Title>Example vulnerability in Imaginary ICS Controller</Title>
      <VulinfoDescription>
        <Overview>Imaginary ICS Controller provided by Example Industrial Corporation contains an authentication bypass vulnerability.</Overview>
      </VulinfoDescription>
      <Affected>
        <AffectedItem affectedstatus="vulnerable">
          <Name>Example Industrial Corporation</Name>
          <ProductName>Imaginary ICS Controller firmware</ProductName>
          <Cpe version="2.3" vendor="example" product="imaginary_controller">cpe:2.3:o:example:imaginary_controller_firmware:2.0</Cpe>
          <VersionNumber operator="le">2.0.5</VersionNumber>
        </AffectedItem>
      </Affected>
      <Impact>
        <Cvss version="3.1">
          <Severity type="Base">High</Severity>
          <Base>8.8</Base>
          <Vector>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H</Vector>
        </Cvss>
        <ImpactItem>
          <Description>A remote attacker could execute arbitrary code.</Description>
        </ImpactItem>
      </Impact>
      <Solution>
        <SolutionItem>
          <Description>Apply firmware version 2.0.6 or later provided by the vendor.</Description>
        </SolutionItem>
      </Solution>
      <Related>
        <RelatedItem type="advisory">
          <Name>Example ICS Vendor Advisory</Name>
          <VulinfoID>EX-2024-01</VulinfoID>
          <URL>https://vendor.example.com/advisories/EX-2024-01</URL>
        </RelatedItem>
        <RelatedItem type="advisory">
          <Name>Vendor advisory duplicate</Name>
          <URL>https://vendor.example.com/advisories/EX-2024-01</URL>
        </RelatedItem>
        <RelatedItem type="advisory">
          <Name>Common Vulnerabilities and Exposures (CVE)</Name>
          <VulinfoID>CVE-2024-5555</VulinfoID>
          <URL>https://www.cve.org/CVERecord?id=CVE-2024-5555</URL>
        </RelatedItem>
        <RelatedItem type="cwe">
          <Name>JVNDB</Name>
          <VulinfoID>CWE-287</VulinfoID>
          <Title>Improper Authentication</Title>
          <URL>https://cwe.mitre.org/data/definitions/287.html</URL>
        </RelatedItem>
      </Related>
      <History>
        <HistoryItem>
          <HistoryNo>1</HistoryNo>
          <DateTime>2024-03-09T11:00:00+09:00</DateTime>
          <Description>[2024/03/09] Initial advisory published.</Description>
        </HistoryItem>
        <HistoryItem>
          <HistoryNo>2</HistoryNo>
          <DateTime>2024-03-10T11:30:00+09:00</DateTime>
          <Description>[2024/03/10] Vendor solution updated.</Description>
        </HistoryItem>
      </History>
      <DateFirstPublished>2024-03-09T11:00:00+09:00</DateFirstPublished>
      <DateLastUpdated>2024-03-10T11:30:00+09:00</DateLastUpdated>
      <DatePublic>2024-03-09T00:00:00+09:00</DatePublic>
    </VulinfoData>
  </Vulinfo>
  <sec:handling>
    <marking:Marking>
      <marking:Marking_Structure xsi:type="tlpMarking:TLPMarkingStructureType" color="WHITE" />
    </marking:Marking>
  </sec:handling>
  <status:Status
      version="3.3"
      method="getVulnDetailInfo"
      lang="en"
      errCd="0"
      errMsg="Success"
      category="product"
      retCd="0"
      retMax="10"
      totalRes="1"
      totalResRet="1"
      firstRes="1"
      feed="hnd"
      vulnId="JVNDB-2024-123456" />
</VULDEF-Document>
