Exploit Report

Computer Security And Bug Information

CVE-2023-0623

CVECVE-2023-0623
CVE Title
Published Date2023-03-09T22:15Z
Modified Date2023-03-13T03:50Z
CWE TypeCWE-787
CVSS 3.xCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
DescriptionCscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
References
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites.
Reference URLhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04
Reference DescriptionMISC https://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04
Reference Description
TagsThird Party Advisory US Government Resource
Sources NIST MITRE

This site's data is aggregated programmatically and provided "as is" without any representations or warranties, express or implied. Exploit.report is not affiliated with the The MITRE Corporation, U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), or US government in any way. CVE and the CVE logo are registered trademarks of The MITRE Corporation

© 2022 Exploit.Report | Data | Contact | Privacy Policy | Articles