CVE-2023-22360

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2023-22360
Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even when an error was detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

7.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.electronics.jtekt.co.jp/en/topics/202302035233/ Patch Vendor Advisory
https://jvn.jp/en/vu/JVNVU98917488/ Patch Third Party Advisory VDB Entry
https://www.electronics.jtekt.co.jp/jp/topics/2023020313454/ Patch Vendor Advisory
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:jtekt:screen_creator_advance_2:0.1.1.4:build01:*:*:*:*:*:*
cpe:2.3:a:jtekt:screen_creator_advance_2:*:*:*:*:*:*:*:*
Information

Published : 2023-02-12 18:21

Updated : 2023-02-27 09:26

NVD link : CVE-2023-22360

Mitre link : CVE-2023-22360

JSON object : View

CWE
CWE-416

Use After Free

Advertisement

dedicated server usa
Products Affected

jtekt

  • screen_creator_advance_2