Lucene search
IcscertCVE-2022-2896HistoryAug 31, 2022 - 9:15 p.m.
CVE-2022-2896
2022-08-3121:15:08
CWE-121
CWE-416
icscert
web.nvd.nist.gov
27
3
cve-2022-2896
measuresoft
scadapro server
vulnerability
use after free
nvd
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.2%
Measuresoft ScadaPro Server (All Versions) allows use after free while processing a specific project file.
Affected configurations
Node
measuresoftscadapro_server
| Vendor | Product | Version | CPE |
|---|---|---|---|
| measuresoft | scadapro_server | * | cpe:2.3:a:measuresoft:scadapro_server:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "ScadaPro Server",
"vendor": "Measuresoft",
"versions": [
{
"status": "affected",
"version": "All Versions"
}
]
}
]Social References
More
Related
zdi
zdi
prion
prion
Double free
2022-08-31 21:15:00
cvelist
cvelist
CVE-2022-2896 Measuresoft ScadaPro Server Use After Free
2022-08-31 20:54:55
nvd
nvd
CVE-2022-2896
2022-08-31 21:15:08
ics
ics
Measuresoft ScadaPro Server and Client
2022-08-23 12:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.2%
Related for CVE-2022-2896