Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-29488 Details

The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02	CVE	Third Party AdvisoryUS Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02	[email protected]	Third Party AdvisoryUS Government Resource

CWE-ID	CWE Name	Source
CWE-824	Access of Uninitialized Pointer	[email protected]
CWE-125	Out-of-bounds Read	[email protected]

Product	Versions
hornerautomation cscape	< 9.90 9.90 - 9.90 sp1 9.90 sp2 9.90 sp3
CPE cpe:2.3:a:hornerautomation:cscape:::::::: cpe:2.3:a:hornerautomation:cscape:9.90:-:::::: cpe:2.3:a:hornerautomation:cscape:9.90:sp1:::::: cpe:2.3:a:hornerautomation:cscape:9.90:sp2:::::: cpe:2.3:a:hornerautomation:cscape:9.90:sp3:::::: cpe:2.3:a:hornerautomation:cscape:9.90:sp4:::::: cpe:2.3:a:hornerautomation:cscape:9.90:sp5:::::: Remediation No remediation found in references.

Product

Versions

hornerautomation cscape

< 9.90

9.90 -

9.90 sp1

9.90 sp2

9.90 sp3

6 change records found show changes

QUICK INFO