Design/Logic Flaw

2024-01-1523:15:00

PRIOn knowledge base

www.prio-n.com

horner automation

cscape

versions 9.90 sp10

local attackers

arbitrary code

malicious csp file

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.2%

JSON

In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.

CPENameOperatorVersion
cscapeeq9.90
cscapeeq9.90 sp1
cscapeeq9.90 sp2
cscapeeq9.90 sp3
cscapelt9.90
cscapeeq9.90 sp4
cscapeeq9.90 sp5
cscapeeq9.90 sp6
cscapeeq9.90 sp7
cscapeeq9.90 sp7.1

Name	Operator	Version
cscape	eq	9.90
cscape	eq	9.90 sp1
cscape	eq	9.90 sp2
cscape	eq	9.90 sp3
cscape	lt	9.90
cscape	eq	9.90 sp4
cscape	eq	9.90 sp5
cscape	eq	9.90 sp6
cscape	eq	9.90 sp7
cscape	eq	9.90 sp7.1