CVE-2022-2892 Measuresoft ScadaPro Server Out-of-bounds Write

Measuresoft ScadaPro Server Versions prior to 6.8.0.1 uses an unmaintained ActiveX control, which may allow an out-of-bounds write condition while processing a specific project file...

CVE-2022-2892

CVE-2022-2892 affects Measuresoft ScadaPro Server prior to 6.8.0.1. The flaw arises from an unmaintained ActiveX control used during processing of a specific project file, enabling an out-of-bounds write. The CVSS v3.1 base score is 7.8 (HIGH) with LOCAL attack vector, low attack complexity, no p...

Measuresoft ScadaPro Server

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Measuresoft Equipment: ScadaPro Server Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability may allow arbitrary code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The...