Lucene search
IcscertCVELIST:CVE-2023-0621HistoryMar 09, 2023 - 9:13 p.m.
CVE-2023-0621 CVE-2023-0621
2023-03-0921:13:06
icscert
www.cve.org
2
cscape envision rv
version 4.60
out-of-bounds read
vulnerability
parsing project
hmi files
user-supplied data
arbitrary code
current process
EPSS
0.001
Percentile
27.9%
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
CNA Affected
[
{
"vendor": "Horner Automation",
"product": "Cscape Envision RV",
"versions": [
{
"status": "affected",
"version": "4.60"
}
]
}
]Related
prion
prion
Out-of-bounds
2023-03-09 22:15:00
cve
cve
CVE-2023-0621
2023-03-09 22:15:51
nvd
nvd
CVE-2023-0621
2023-03-09 22:15:51
ics
ics
Horner Automation Cscape Envision RV
2023-02-09 12:00:00