Design/Logic Flaw

2021-08-2519:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

32.4%

JSON

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process.

CPENameOperatorVersion
cscapeeq9.90
cscapeeq9.90 sp1
cscapeeq9.90 sp2
cscapeeq9.90 sp3
cscapelt9.90
cscapeeq9.90 sp4

Name	Operator	Version
cscape	eq	9.90
cscape	eq	9.90 sp1
cscape	eq	9.90 sp2
cscape	eq	9.90 sp3
cscape	lt	9.90
cscape	eq	9.90 sp4

References

us-cert.cisa.gov/ics/advisories/icsa-21-224-02

0.001 Low

EPSS

Percentile

32.4%

JSON

Related for PRION:CVE-2021-33015