CVE-2018-10598 Vulnerability Details

  /     /     /  

CVE-2018-10598 Metadata Quick Info

CVE Published: 13/08/2018 | CVE Updated: 17/09/2024 | CVE Year: 2018
Source: icscert | Vendor: ICS-CERT | Product: CNCSoft with ScreenEditor
Status : PUBLISHED

---

CVE-2018-10598 Description

CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has two out-of-bounds read vulnerabilities could cause the software to crash due to lacking user input validation for processing project files. Which may allow an attacker to gain remote code execution with administrator privileges if exploited.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-125
CWE Name: OUT-OF-BOUNDS READ CWE-125
Source: ICS-CERT

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).