CVE-2018-19005

7.8 highEPSS 1.7%

Cscape, Version 9.80.75.3 SP3 and prior. An improper input validation vulnerability has been identified that may be exploited by processing specially crafted POC files lacking user input validation. This may allow an attacker to read confidential information and remotely execute arbitrary code.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hornerautomation:cscape

References

http://www.securityfocus.com/bid/106275
https://ics-cert.us-cert.gov/advisories/ICSA-18-354-01
http://www.securityfocus.com/bid/106275
https://ics-cert.us-cert.gov/advisories/ICSA-18-354-01

Check your stack JSON