Design/Logic Flaw

2021-02-0917:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

43.4%

JSON

Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.

CPENameOperatorVersion
cscapelt9.90
cscapeeq9.90 sp1
cscapeeq9.90 sp3
cscapeeq9.90

Name	Operator	Version
cscape	lt	9.90
cscape	eq	9.90 sp1
cscape	eq	9.90 sp3
cscape	eq	9.90

References

us-cert.cisa.gov/ics/advisories/icsa-21-035-02

0.001 Low

EPSS

Percentile

43.4%

JSON

Related for PRION:CVE-2021-22663