CVE-2023-39985

HighCVSS 7.8

Published: 23/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

CVE-2023-39985 is a vulnerability in Hitachi EH-VIEW (Designer) related to out-of-bounds write, allowing local attackers to potentially execute arbitrary code on affected EH-VIEW installations. User interaction is required to exploit this vulnerability as the user must open a malicious file.

Risk Assessment

The risk to the organization involves the potential for arbitrary code execution by a local attacker, which could lead to data loss or system takeover. Additionally, the vulnerability affects products that are no longer supported by the vendor.

Recommendation

It is recommended to avoid using EH-VIEW products that are no longer supported and to educate users about the risks of opening unknown files. If the use of this software is necessary, additional security measures should be implemented.

Other vulnerabilities in Hitachi EH-VIEW (Designer)

CVE-2023-39986High
Out-of-bounds Read vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially disclose information on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file.

Original NVD description (English source)

** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that the user must open a malicious file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS