VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 9, 2021· Updated Jun 17, 2026

CVE-2021-22663

CVE-2021-22663

Description

Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Cscape/Cscapedescription
  • Eaton/Cscapellm-create
    Range: <9.90 SP3.5
  • Hornerautomation/Cscape
    cpe:2.3:a:hornerautomation:cscape:*:*:*:*:*:*:*:*
    Range: <9.90
  • Siemens Foundation/Cscape3 versions
    cpe:2.3:a:siemens:cscape:9.90:-:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:siemens:cscape:9.90:-:*:*:*:*:*:*
    • cpe:2.3:a:siemens:cscape:9.90:sp1:*:*:*:*:*:*
    • cpe:2.3:a:siemens:cscape:9.90:sp3:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.