← Back

CVE-2022-28690

nvd nist
Published: Jun 2, 2022Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.

Affected (7)

Hornerautomation
1 product
Cscape
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Hornerautomation
Cscape
Before 9.90
Cscape
Version 9.90
Cscape
Version 9.90 sp1
Cscape
Version 9.90 sp2
Cscape
Version 9.90 sp3
Cscape
Version 9.90 sp4
Cscape
Version 9.90 sp5

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
CWE-824
Access of Uninitialized Pointer
The product accesses or uses a pointer that has not been initialized.

References (2)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.