Lucene search

K
cvelistIcscertCVELIST:CVE-2023-0621
HistoryMar 09, 2023 - 9:13 p.m.

CVE-2023-0621 CVE-2023-0621

2023-03-0921:13:06
icscert
www.cve.org
cscape envision rv
version 4.60
out-of-bounds read
vulnerability
parsing project
hmi files
user-supplied data
arbitrary code
current process

0.001 Low

EPSS

Percentile

21.7%

Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.

CNA Affected

[
  {
    "vendor": "Horner Automation",
    "product": "Cscape Envision RV",
    "versions": [
      {
        "status": "affected",
        "version": "4.60"
      }
    ]
  }
]

0.001 Low

EPSS

Percentile

21.7%

Related for CVELIST:CVE-2023-0621