Input validation

2019-02-2820:29:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.4%

JSON

Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code.

CPENameOperatorVersion
cscapelt9.80
cscapeeq9.80
cscapeeq9.80 sp1
cscapeeq9.80 sp2
cscapeeq9.80 sp3
cscapeeq9.80 sp4

Name	Operator	Version
cscape	lt	9.80
cscape	eq	9.80
cscape	eq	9.80 sp1
cscape	eq	9.80 sp2
cscape	eq	9.80 sp3
cscape	eq	9.80 sp4

References

www.securityfocus.com/bid/107087

ics-cert.us-cert.gov/advisories/ICSA-19-050-03