2 lines
2.6 KiB
JSON
2 lines
2.6 KiB
JSON
{"affected":[{"affectedData":[{"product":"ScadaPro Server","vendor":"Measuresoft","versions":[{"status":"affected","version":"All Versions"}]}],"source":"ics-cert@hq.dhs.gov"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:measuresoft:scadapro_server:*:*:*:*:*:*:*:*","matchCriteriaId":"69C1131E-C11C-4262-B4DF-E7486538EF7A","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. These controls may allow two stack-based buffer overflow instances while processing a specific project file."},{"lang":"es","value":"Measuresoft ScadaPro Server (Todas las versiones) usa controles ActiveX no mantenidos. Estos controles pueden permitir dos instancias de desbordamiento de búfer en la región stack de la memoria mientras es procesado un archivo de proyecto específico"}],"id":"CVE-2022-2895","lastModified":"2026-06-17T04:42:47.403","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"ics-cert@hq.dhs.gov","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-2895","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-04-16T17:27:31.880992Z","version":"2.0.3"}}]},"published":"2022-08-31T21:15:08.410","references":[{"source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-06"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-22-235-06"}],"sourceIdentifier":"ics-cert@hq.dhs.gov","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-121"}],"source":"ics-cert@hq.dhs.gov","type":"Secondary"}]}
|