CVE-2023-0621:
First published: Thu Mar 09 2023(Updated: )
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
Credit: ics-cert@hq.dhs.gov ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hornerautomation Cscape Envision Rv | =4.60 | |
| Horner Automation Cscape Envision RV | =4.60 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-0621?
CVE-2023-0621 is an out-of-bounds read vulnerability in Cscape Envision RV version 4.60 when parsing project files.
What is the severity of CVE-2023-0621?
The severity of CVE-2023-0621 is high with a CVSS score of 7.8.
How does CVE-2023-0621 impact Cscape Envision RV version 4.60?
CVE-2023-0621 allows an attacker to read past the end of allocated data structures, potentially leading to unauthorized access or information disclosure.
Is there a fix available for CVE-2023-0621?
Currently, there is no information available regarding a fix for CVE-2023-0621. It is recommended to follow the guidance provided by the product vendor or software developer.
Where can I find more information about CVE-2023-0621?
You can find more information about CVE-2023-0621 in the advisory published by CISA at https://www.cisa.gov/news-events/ics-advisories/icsa-23-040-04.
- collector/nvd-index
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/title
- agent/first-publish-date
- agent/event
- agent/trending
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/author
- agent/last-modified-date
- agent/tags
- agent/source
- vendor/hornerautomation
- canonical/hornerautomation cscape envision rv
- version/hornerautomation cscape envision rv/4.60
- vendor/horner automation
- canonical/horner automation cscape envision rv
- version/horner automation cscape envision rv/4.60