CVE-2019-6555
HIGHCscape < 9.80 SP4 - Remote Code Execution via Crafted POC File
Title source: llmDescription
Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code.
References (2)
Core 2
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-19-050-03
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/107087
Scores
CVSS v3
7.8
EPSS
0.0172
EPSS Percentile
74.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-20
Status
published
Products (2)
hornerautomation/cscape
9.80 (5 CPE variants)
hornerautomation/cscape
< 9.80
Published
Feb 28, 2019
Tracked Since
Feb 18, 2026