CVE-2022-34291
published 2022-07-12CVE-2022-34291: A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while…
PriorityP424medium5.5CVSS 3.1
AVLACLPRNUIRSUCHINAN
EPSS
1.09%
61.5th percentile
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsing PCB files. An attacker could leverage this vulnerability to leak information in the context of the current process. (FG-VD-22-057, FG-VD-22-058, FG-VD-22-060)
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| siemens | pads_standard_plus_viewer | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens PADS Standard/Plus Viewer
cisa_ics·2022-07-14·CVSS 7.8
[HIGH] Siemens PADS Standard/Plus Viewer
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Siemens PADS Standard/Plus Viewer
Last RevisedJuly 14, 2022
Alert CodeICSA-22-195-08
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.8
- ATTENTION: Low attack complexity
- Vendor: Siemens
- Equipment: PADS Standard/Plus Viewer
- Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write, Improper Restriction of Operations within the Bounds of a Memory Buffer
## 2. RISK EVALUATION
Successful exploitations of these vulnerabilities could allow an attacker to trick a user into opening a malicious file within the affected application, which could result in code execution.
## 3. TECHNICAL DE
GHSA
GHSA-4834-f23x-wx4q: A vulnerability has been identified in PADS Standard/Plus Viewer (All versions)
ghsa_unreviewed·2022-07-13
CVE-2022-34291 [MEDIUM] CWE-119 GHSA-4834-f23x-wx4q: A vulnerability has been identified in PADS Standard/Plus Viewer (All versions)
A vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsing PCB files. An attacker could leverage this vulnerability to leak information in the context of the current process. (FG-VD-22-057, FG-VD-22-058, FG-VD-22-060)
No detection rules found.
No public exploits indexed.
2022-07-12
Published