HIGH🇬🇧 English

CVE-2023-28653

CVSS 7.8v3.1pub. 2023-06-06upd. 2024-11-21

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Hornerautomation Cscape

    APP
    Hornerautomation
    9.90

  • Hornerautomation Cscape Envisionrv

    APP
    Hornerautomation
    4.70
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEMemory
CWE
Referencje

Powiązane podatności

CVE-2023-7206HIGH7.8ten sam produkt

In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerabil...

CVE-2023-27916HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing font files ...

CVE-2023-31244HIGH7.8ten sam produkt

The affected product does not properly validate user-supplied data. If a user opens a malic...

CVE-2023-29503HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing project files (e.g....

CVE-2023-31278HIGH7.8ten sam produkt

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI)....