CVE-2024-12212 in Cscape

Summary

by MITRE • 12/13/2024

The vulnerability occurs in the parsing of CSP files. The issues result from the lack of proper validation of user-supplied data, which could allow reading past the end of allocated data structures, resulting in execution of arbitrary code.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Disclosure: 12/13/2024
• Moderation: accepted
• Entry: VDB-287565
• CPE: ready
• CWE: CWE-125 (confirmed)
• CVSS: 8.8 (VulDB)
• EPSS: 0.00205
• KEV: no
• Activities: very low
• Sector: Agriculture, Telecommunication, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-12212
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-12212
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-12212/