HIGH🇬🇧 English

CVE-2023-31244

CVSS 7.8v3.1pub. 2023-06-06upd. 2024-11-21

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Hornerautomation Cscape

    APP
    Hornerautomation
    9.90

  • Hornerautomation Cscape Envisionrv

    APP
    Hornerautomation
    4.70
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
CWE
Referencje

Powiązane podatności

CVE-2023-7206HIGH7.8ten sam produkt

In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerabil...

CVE-2023-27916HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing font files ...

CVE-2023-29503HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing project files (e.g....

CVE-2023-28653HIGH7.8ten sam produkt

The affected application lacks proper validation of user-supplied data when parsing project f...

CVE-2023-31278HIGH7.8ten sam produkt

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI)....