Lucene search

CVE-2022-3379

🗓️ 27 Oct 2022 22:48:11Reported by icscertType

Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer

Reporter	Title	Published	Views	Family All 5
RedhatCVE	CVE-2022-3379	6 Feb 202500:44	–	redhatcve
CVE	CVE-2022-3379	27 Oct 202223:15	–	cve
NVD	CVE-2022-3379	27 Oct 202223:15	–	nvd
Prion	Buffer overflow	27 Oct 202223:15	–	prion
ICS	Horner Automation Cscape	4 Oct 202206:00	–	ics

[
  {
    "defaultStatus": "unaffected",
    "product": "Cscape",
    "vendor": "Horner Automation",
    "versions": [
      {
        "lessThanOrEqual": "9.90",
        "status": "affected",
        "version": "0",
        "versionType": "SP 7"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-277-03

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Oct 2022 22:11Current

8.1High risk

Vulners AI Score8.1

CVSS37.8

EPSS0.00251

CWE-787