Lucene search
HistoryJun 06, 2023 - 5:15 p.m.
CVE-2023-28653
affected application
validation
user-supplied data
parsing
project files
use-after-free
vulnerability
arbitrary code
current process
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
21.9%
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected configurations
Node
hornerautomationcscapeMatch9.90sp8
ORhornerautomationcscape_envisionrvMatch4.70
Related
cve
cve
CVE-2023-28653
2023-06-06 17:15:13
prion
prion
Design/Logic Flaw
2023-06-06 17:15:00
cvelist
cvelist
CVE-2023-28653
2023-06-06 16:42:49
ics
ics
Horner Automation Cscape
2023-05-23 12:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
21.9%
Related for NVD:CVE-2023-28653