CVE-2022-3379

7.8 highEPSS 0.3%

High (7.8) in hornerautomation cscape. EPSS 0.3% chance of exploitation in the next 30 days.

Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current process by writing outside the memory buffer.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2022-10-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hornerautomation:cscape

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-03
https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-03

Check your stack JSON