Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wpp7-q3x3-5ggp

Опубликовано: 02 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 7.5

Описание

Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi()' and then uses it as an index in the 'FilesDownload' array with '(&FilesDownload)[iVar2]'. If the parameter is too large, it will access memory beyond the limits.

Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi()' and then uses it as an index in the 'FilesDownload' array with '(&FilesDownload)[iVar2]'. If the parameter is too large, it will access memory beyond the limits.

EPSS

Процентиль: 12%
0.00039
Низкий

7.1 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.5
nvd
2 месяца назад

Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi()' and then uses it as an index in the 'FilesDownload' array with '(&FilesDownload)[iVar2]'. If the parameter is too large, it will access memory beyond the limits.

EPSS

Процентиль: 12%
0.00039
Низкий

7.1 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-125