PT-2023-2871 · Horner Automation · Cscape+1

Michael Heinzl · Published 2023-05-23 · Updated 2023-06-12 · CVE-2023-31244

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Horner Automation Cscape EnvisionRV (affected versions not specified) Cscape (affected versions not specified)

Description The issue is related to accessing an uninitialized pointer, which can be exploited by opening a specially crafted CSP file. This could allow an attacker to execute arbitrary code within the current process. The affected product does not properly validate user-supplied data.

Recommendations For Horner Automation Cscape EnvisionRV, avoid using the CSP file feature until a fix is available. For Cscape, restrict access to CSP files to minimize the risk of exploitation. As a temporary workaround, consider disabling the CSP file opening functionality in both products until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

BDU:2023-02819

CVE-2023-31244

Affected Products

Cscape

Horner Automation Cscape Envisionrv

References · 7

• https://bdu.fstec.ru/vul/2023-02819 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31244 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31244 · Security Note
• https://isssource.com/horner-automation-fixes-cscape · Note
• https://hornerautomation.com/cscape-software · Note
• https://hornerautomation.com/product/cscape-envision-rv · Note
• https://cisa.gov/news-events/ics-advisories/icsa-23-143-04 · Note