HIGH🇬🇧 English

CVE-2023-7206

CVSS 7.8v3.1pub. 2024-01-15upd. 2024-11-21

In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Hornerautomation Cscape

    APP
    Hornerautomation
    9.90< 9.90
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-31244HIGH7.8ten sam produkt

The affected product does not properly validate user-supplied data. If a user opens a malic...

CVE-2023-27916HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing font files ...

CVE-2023-29503HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing project files (e.g....

CVE-2023-28653HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing project f...

CVE-2023-31278HIGH7.8ten sam produkt

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI)....