CVE-2022-3377highCWE-824

CVE-2022-3377: falha de alta gravidade em Horner Automation Cscape

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cscape

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.8epss 0.3%
Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer, leading to an out-of-bounds memory read.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Horner Automation · Cscape
CVEs relacionadas — Horner Automation Cscape

No mesmo produto, das mais perigosas para as menos.

CVE-2026-6284CRITICALHorner Automation Cscape and XL4, XL7 PLC Weak password requirementsEPSS 0.4%CVE-2025-4098HIGHOut-of-bounds Read in Horner Automation CscapeEPSS 0.3%CVE-2022-3378HIGHCVE-2022-3378EPSS 0.3%CVE-2022-3379HIGHCVE-2022-3379EPSS 0.3%CVE-2023-28653HIGHCVE-2023-28653EPSS 0.2%CVE-2023-29503HIGHCVE-2023-29503EPSS 0.2%