CVE-2023-22354
Assigner: icscert
Published: 2023-04-20T18:13:50.042Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: CrossCAD/Ware_x64 library 0
vendor: Datakit
versions: lessThan: 2023.1 
status: affected
version: 0
versionType: custom
datePublic: 2023-04-13T17:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">

<span style="background-color: rgb(255, 255, 255);">Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. </span>

 </span>

 </span>


value: 




Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information. 

 

 


metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-125
description: CWE-125 Out-of-bounds Read
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: 

<p>Datakit recommends user upgrade to <a target="_blank" rel="nofollow" href="https://www.datakit.com/en/crosscad_ware.php">v2023.1</a>&nbsp;or later. </p><p><br></p>
value: 
Datakit recommends user upgrade to  v2023.1 https://www.datakit.com/en/crosscad_ware.php  or later. 





source: advisory: ICSA-23-103-14
discovery: EXTERNAL
title: Datakit CrossCAD/Ware
workarounds: supportingMedia: base64: no
type: text/html
value: 

<p>Datakit has identified specific workarounds and mitigations that should be applied to reduce the risk:</p><ul><li>Do not open untrusted SLDPRT files with CrossCAD/Ware</li><li>Update CrossCAD/Ware to 2023.1 or a later version.</li></ul>

<br>
value: 
Datakit has identified specific workarounds and mitigations that should be applied to reduce the risk:

  *  Do not open untrusted SLDPRT files with CrossCAD/Ware
  *  Update CrossCAD/Ware to 2023.1 or a later version.






x_generator: engine: Vulnogram 0.1.0-dev