7.8

CVE-2021-33015

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hornerautomation ≫ Cscape Version < 9.90
Hornerautomation ≫ Cscape Version 9.90 Update -
Hornerautomation ≫ Cscape Version 9.90 Update sp1
Hornerautomation ≫ Cscape Version 9.90 Update sp2
Hornerautomation ≫ Cscape Version 9.90 Update sp3
Hornerautomation ≫ Cscape Version 9.90 Update sp4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1% 0.581
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-824 Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

https://us-cert.cisa.gov/ics/advisories/icsa-21-224-02
Third Party Advisory
US Government Resource