Cscape
CVE-2023-31244
HIGH
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer.
AnalysisAI
The affected product does not properly validate user-supplied data. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-824. The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer. Affected products include: Hornerautomation Cscape, Hornerautomation Cscape Envisionrv.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Out-of-bounds read in Horner Automation Cscape prior to 10.2 SP3 lets an attacker who supplies a malicious CSP project f
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). Rated hig
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). Rated hig
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). Rated hig
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). Rated hig
The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). Rated high s
Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). Rated hig
The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). Rated hi
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). Rated hig
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). Rated hig
Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. Rated high severit
Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. Rated high severity
Same weakness CWE-824 – Access of Uninitialized Pointer
View allSame technique Memory Corruption
View allShare
External POC / Exploit Code
Leaving vuln.today