HIGH🇵🇱 Wersja polska

CVE-2023-31278

CVSS 7.8v3.1pub. 2023-06-06upd. 2024-11-21

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current process.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Hornerautomation Cscape

    APP
    Hornerautomation
    9.90

  • Hornerautomation Cscape Envisionrv

    APP
    Hornerautomation
    4.70
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2023-7206HIGH7.8ten sam produkt

In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerabil...

CVE-2023-27916HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing font files ...

CVE-2023-29503HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing project files (e.g....

CVE-2023-28653HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing project f...

CVE-2023-31244HIGH7.8ten sam produkt

The affected product does not properly validate user-supplied data. If a user opens a malic...