Approved changes feed: RSS · Atom

cpe:2.3:a:horner_automation:cscape_envision_rv:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHorner Automation (cf46fb05-8a61-59d7-82b9-37d5439df822)
ProductCscape Envision Rv (9689d870-44b7-5db6-a732-cedca522f73e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0623 vulnerable 2026-06-08 05:52:32.097006 CVE-2023-0623
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
Published: 2023-03-09T21:12:00.661Z
Updated: 2025-01-17T22:09:58.228Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0622 vulnerable 2026-06-08 05:52:32.096675 CVE-2023-0622
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
Published: 2023-03-09T21:10:55.755Z
Updated: 2025-01-17T22:10:45.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0621 vulnerable 2026-06-08 05:52:32.095446 CVE-2023-0621
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated data structures. An attacker could leverage these vulnerabilities to execute arbitrary code in the context of the current process.
Published: 2023-03-09T21:13:06.983Z
Updated: 2025-01-17T22:09:20.608Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.