CVE-2023-31244 HIGH

CVE-2023-31244

Vendor Horner Automation
Product Cscape
Weakness CWE-824
Published June 6, 2023
Last update January 7, 2025
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized pointer.

Key dates

02Disclosure timeline

June 6, 2023 CVE published
January 7, 2025 Record updated