Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hqx3-2rj3-qx6v

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.

EPSS

Процентиль: 61%
0.00407
Низкий

Связанные уязвимости

CVSS3: 7.8
nvd
больше 5 лет назад

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.

EPSS

Процентиль: 61%
0.00407
Низкий