Описание
In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access information and remotely execute arbitrary code.
Ссылки
- MitigationThird Party AdvisoryUS Government Resource
- Third Party AdvisoryVDB Entry
- MitigationThird Party AdvisoryUS Government Resource
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1Версия до 9.90 (включая)
cpe:2.3:a:hornerautomation:cscape:*:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.0029
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-20
CWE-787
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access information and remotely execute arbitrary code.
EPSS
Процентиль: 52%
0.0029
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-20
CWE-787