CVE Catalog

CVE-2023-39984

HighCVSS 7.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.18%

8th percentile - higher than 8% of all known CVEs

Summary

A vulnerability in Hitachi EH-VIEW (KeypadDesigner) related to improper restriction of operations within the bounds of a memory buffer may allow local attackers to disclose information and execute arbitrary code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities as the user must open a malicious file.

Risk Assessment

The organization may be exposed to the disclosure of sensitive information and the possibility of executing unauthorized code, which could lead to serious security consequences.

Recommendation

It is recommended to avoid using products that are no longer supported by the vendor and to educate users about the risks associated with opening unknown files.

Other vulnerabilities in Hitachi EH-VIEW (KeypadDesigner)

Original NVD description (English source)

** UNSUPPORTED WHEN ASSIGNED ** Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially disclose information and execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS