PT-2023-16406 · Unknown · Cscape Envision Rv

Michael Heinzl · Published 2023-03-09 · Updated 2025-01-17 · CVE-2023-0621

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cscape Envision RV version 4.60

Description The issue is related to an out-of-bounds read vulnerability when parsing project files, also known as HMI files. This occurs due to the product's lack of proper validation of user-supplied data, potentially resulting in reads past the end of allocated data structures. An attacker could exploit this to execute arbitrary code in the context of the current process.

Recommendations For Cscape Envision RV version 4.60, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2023-0621

Affected Products

Cscape Envision Rv

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-0621 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0621 · Vendor Advisory
• https://cisa.gov/news-events/ics-advisories/icsa-23-040-04 · Note
• https://t.me/cvenotify/107841 · Telegram Post