Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vgcc-pfmc-gjmc

Опубликовано: 16 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.

In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.

EPSS

Процентиль: 10%
0.00036
Низкий

7.8 High

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 7.8
nvd
около 2 лет назад

In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.

EPSS

Процентиль: 10%
0.00036
Низкий

7.8 High

CVSS3

Дефекты

CWE-121
CWE-787