Lucene search
IcscertCVELIST:CVE-2023-0623HistoryMar 09, 2023 - 9:12 p.m.
CVE-2023-0623 CVE-2023-0623
2023-03-0921:12:00
icscert
www.cve.org
2
cscape envision rv
version 4.60
out-of-bounds write
vulnerability
parsing project files
user-supplied data
arbitrary code
current process
EPSS
0.001
Percentile
27.9%
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
CNA Affected
[
{
"vendor": "Horner Automation",
"product": "Cscape Envision RV",
"versions": [
{
"status": "affected",
"version": "4.60"
}
]
}
]Related
cve
cve
CVE-2023-0623
2023-03-09 22:15:51
nvd
nvd
CVE-2023-0623
2023-03-09 22:15:51
prion
prion
Out-of-bounds
2023-03-09 22:15:00
ics
ics
Horner Automation Cscape Envision RV
2023-02-09 12:00:00