CVE-2021-22678

EPSS 1.0%CWE-20

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

23 abr 2021Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current process.

Produtos afetados

n/a · Cscape

Referências

https://us-cert.cisa.gov/ics/advisories/icsa-21-112-01