CVE-2020-27280

2021-01-2612:51:33

CWE-416

icscert

www.cve.org

0.002 Low

EPSS

Percentile

58.6%

JSON

A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution.

CNA Affected

[
  {
    "product": "ISPSoft",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "v3.12 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-021-01

0.002 Low

EPSS

Percentile

58.6%

JSON

Related for CVELIST:CVE-2020-27280