Lucene search
IcscertCVELIST:CVE-2023-0622HistoryMar 09, 2023 - 9:10 p.m.
CVE-2023-0622 CVE-2023-0622
2023-03-0921:10:55
icscert
www.cve.org
cscape envision rv
out-of-bounds write
hmi files
arbitrary code
vulnerability
user-supplied data
data structures
0.001 Low
EPSS
Percentile
21.7%
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
CNA Affected
[
{
"vendor": "Horner Automation",
"product": "Cscape Envision RV",
"versions": [
{
"status": "affected",
"version": "4.60"
}
]
}
]Related
nvd
nvd
CVE-2023-0622
2023-03-09 22:15:51
prion
prion
Out-of-bounds
2023-03-09 22:15:00
cve
cve
CVE-2023-0622
2023-03-09 22:15:51
ics
ics
Horner Automation Cscape Envision RV
2023-02-09 12:00:00