CVE-2022-28690: Horner Automation Cscape Csfont
First published: Wed Jun 01 2022(Updated: )
The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cscape by Horner Automation | ||
| Siemens Cscape | <9.90 | |
| Siemens Cscape | =9.90 | |
| Siemens Cscape | =9.90-sp1 | |
| Siemens Cscape | =9.90-sp2 | |
| Siemens Cscape | =9.90-sp3 | |
| Siemens Cscape | =9.90-sp4 | |
| Siemens Cscape | =9.90-sp5 |
Remedy
Horner Automation recommends affected users update to the latest version of Cscape Csfont Version 9.90 SP6.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-28690.
What is the severity level of CVE-2022-28690?
The severity level of CVE-2022-28690 is high.
What is the affected software for CVE-2022-28690?
The affected software for CVE-2022-28690 is Horner Automation Cscape version 9.90 and its service packs 1, 2, 3, 4, and 5.
What is the description of CVE-2022-28690?
CVE-2022-28690 is a vulnerability in Horner Automation Cscape that allows an attacker to execute arbitrary code by exploiting an out-of-bounds write via an uninitialized pointer.
How can the vulnerability CVE-2022-28690 be fixed?
To fix CVE-2022-28690, it is recommended to update Horner Automation Cscape to a version that is not vulnerable.
- agent/weakness
- agent/type
- agent/author
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/severity
- agent/title
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/horner automation
- canonical/cscape by horner automation
- vendor/hornerautomation
- canonical/siemens cscape
- version/siemens cscape/9.90
- version/siemens cscape/9.90-sp1
- version/siemens cscape/9.90-sp2
- version/siemens cscape/9.90-sp3
- version/siemens cscape/9.90-sp4
- version/siemens cscape/9.90-sp5