Lucene search

IcscertCVE-2022-1405

HistoryAug 31, 2022 - 4:15 p.m.

CVE-2022-1405

2022-08-3116:15:09

CWE-121

icscert

web.nvd.nist.gov

cncsoft

cve-2022-1405

buffer overflow

nvd

software security

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

42.6%

JSON

CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition.

Affected configurations

Nvd

Node

deltawwcncsoftRange<1.01.32

VendorProductVersionCPE
deltawwcncsoft*cpe:2.3:a:deltaww:cncsoft:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
deltaww	cncsoft	*	cpe:2.3:a:deltaww:cncsoft::::::::

CNA Affected

[
  {
    "product": "CNCSoft",
    "vendor": "Delta Electronics",
    "versions": [
      {
        "lessThan": "1.01.32",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/uscert/ics/advisories/icsa-22-132-01

Social References

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

42.6%

JSON

Related for CVE-2022-1405