CVE-2022-3379

Published: Oct 27, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.

Affected (9)

Products: Hornerautomation: Cscape

Hornerautomation

1 product

Cscape

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Hornerautomation Cscape	Before 9.90
Hornerautomation Cscape	Version 9.90
Hornerautomation Cscape	Version 9.90 sp1
Hornerautomation Cscape	Version 9.90 sp2
Hornerautomation Cscape	Version 9.90 sp3
Hornerautomation Cscape	Version 9.90 sp4
Hornerautomation Cscape	Version 9.90 sp5
Hornerautomation Cscape	Version 9.90 sp6
Hornerautomation Cscape	Version 9.90 sp7

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-03

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.