CVE-2023-39984
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A vulnerability in Hitachi EH-VIEW (KeypadDesigner) related to improper restriction of operations within the bounds of a memory buffer may allow local attackers to disclose information and execute arbitrary code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities as the user must open a malicious file.
Risk Assessment
The organization may be exposed to the disclosure of sensitive information and the possibility of executing unauthorized code, which could lead to serious security consequences.
Recommendation
It is recommended to avoid using products that are no longer supported by the vendor and to educate users about the risks associated with opening unknown files.
Other vulnerabilities in Hitachi EH-VIEW (KeypadDesigner)
Original NVD description (English source)
** UNSUPPORTED WHEN ASSIGNED ** Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially disclose information and execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

