CVE-2018-19005

Cscape, Version 9.80.75.3 SP3 and prior. An improper input validation vulnerability has been identified that may be exploited by processing specially crafted POC files lacking user input validation. This may allow an attacker to read confidential information and remotely execute arbitrary code.
References
Link Resource
http://www.securityfocus.com/bid/106275 Third Party Advisory VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-354-01 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hornerautomation:cscape:*:*:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.80.75.3:-:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.80.75.3:sp1:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.80.75.3:sp2:*:*:*:*:*:*
cpe:2.3:a:hornerautomation:cscape:9.80.75.3:sp3:*:*:*:*:*:*

History

No history.

Information

Published : 2018-12-20 21:29

Updated : 2024-02-04 20:03


NVD link : CVE-2018-19005

Mitre link : CVE-2018-19005

CVE.ORG link : CVE-2018-19005


JSON object : View

Products Affected

hornerautomation

  • cscape
CWE
CWE-20

Improper Input Validation