CVE-2023-29503highCWE-121

CVE-2023-29503: falha de alta gravidade em Horner Automation Cscape

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cscape+ Monitorar Cscape EnvisionRV

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.8epss 0.2%
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Horner Automation · CscapeHorner Automation · Cscape EnvisionRV
CVEs relacionadas — Horner Automation Cscape

No mesmo produto, das mais perigosas para as menos.

CVE-2021-44462HIGHHorner Automation Cscape EnvisionRV Improper Input ValidationEPSS 0.7%CVE-2026-6284CRITICALHorner Automation Cscape and XL4, XL7 PLC Weak password requirementsEPSS 0.4%CVE-2025-4098HIGHOut-of-bounds Read in Horner Automation CscapeEPSS 0.3%CVE-2022-3377HIGHCVE-2022-3377EPSS 0.3%CVE-2022-3378HIGHCVE-2022-3378EPSS 0.3%CVE-2022-3379HIGHCVE-2022-3379EPSS 0.3%