CVE-2019-6555 - Cscape, 9.80 SP4 and prior

Back Back to CVE browser

HIGH

Cscape, 9.80 SP4 and prior

Published Feb 28, 2019

7.8

HIGH

CVSS 3.1

EPSS 1.72%

Description

Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code.

Affected products

Vendor Ics-Cert Product Cscape Default
n/a
- Version
  9.80 SP4 and prior.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ics-Cert

Cscape

n/a

Version	Status	Constraints
9.80 SP4 and prior.	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

http://www.securityfocus.com/bid/107087
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-050-03
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/107087		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-050-03		x_refsource_MISCThird Party AdvisoryUS Government Resource