CVE-2023-7206CWE-121
Horner Automation Cscape Stack-Based Buffer Overflow
High · published January 15, 2024
What it is
In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.
The record
Technical detail
- CVSS v3.1
- 7.8 · HIGH
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00213 · 11.0th percentile
- Weakness
- CWE-121 · Stack-based Buffer Overflow
- Published
- 2024-01-15T22:22Z
EPSS history
Timeline