CVE-2018-19005

CVE-2018-19005 concerns Horner Automation Cscape CSP file parsing vulnerabilities. The connected advisories (ZDI-18-1434/1435/1436/1437/1438/1439/1441/1442 and related entries) describe multiple remote code execution flaws stemming from parsing CSP files, caused by lack of proper validation of us...

Horner Automation Cscape

1. EXECUTIVE SUMMARY CVSS v3 6.6 ATTENTION: Low skill level to exploit Vendor: Horner Automation Equipment: Cscape Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could crash the device being accessed, allow the attacker to read...