Lucene search
IcscertCVE-2022-3379HistoryOct 27, 2022 - 11:15 p.m.
CVE-2022-3379
2022-10-2723:15:11
CWE-787
icscert
web.nvd.nist.gov
27
horner automation
cscape
cve-2022-3379
vulnerability
code execution
nvd
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
26.2%
Horner Automation’s Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.
Affected configurations
Node
hornerautomationcscapeRange<9.90
ORhornerautomationcscapeMatch9.90-
ORhornerautomationcscapeMatch9.90sp1
ORhornerautomationcscapeMatch9.90sp2
ORhornerautomationcscapeMatch9.90sp3
ORhornerautomationcscapeMatch9.90sp4
ORhornerautomationcscapeMatch9.90sp5
ORhornerautomationcscapeMatch9.90sp6
ORhornerautomationcscapeMatch9.90sp7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hornerautomation | cscape | * | cpe:2.3:a:hornerautomation:cscape:*:*:*:*:*:*:*:* |
| hornerautomation | cscape | 9.90 | cpe:2.3:a:hornerautomation:cscape:9.90:-:*:*:*:*:*:* |
| hornerautomation | cscape | 9.90 | cpe:2.3:a:hornerautomation:cscape:9.90:sp1:*:*:*:*:*:* |
| hornerautomation | cscape | 9.90 | cpe:2.3:a:hornerautomation:cscape:9.90:sp2:*:*:*:*:*:* |
| hornerautomation | cscape | 9.90 | cpe:2.3:a:hornerautomation:cscape:9.90:sp3:*:*:*:*:*:* |
| hornerautomation | cscape | 9.90 | cpe:2.3:a:hornerautomation:cscape:9.90:sp4:*:*:*:*:*:* |
| hornerautomation | cscape | 9.90 | cpe:2.3:a:hornerautomation:cscape:9.90:sp5:*:*:*:*:*:* |
| hornerautomation | cscape | 9.90 | cpe:2.3:a:hornerautomation:cscape:9.90:sp6:*:*:*:*:*:* |
| hornerautomation | cscape | 9.90 | cpe:2.3:a:hornerautomation:cscape:9.90:sp7:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Cscape",
"vendor": "Horner Automation",
"versions": [
{
"lessThanOrEqual": "9.90",
"status": "affected",
"version": "0",
"versionType": "SP 7"
}
]
}
]Related
nvd
nvd
CVE-2022-3379
2022-10-27 23:15:11
prion
prion
Buffer overflow
2022-10-27 23:15:00
cvelist
cvelist
CVE-2022-3379
2022-10-27 22:11:48
ics
ics
Horner Automation Cscape
2022-10-04 12:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
26.2%
Related for CVE-2022-3379