What is CVE-2020-16232?

CVE-2020-16232 is a low-severity vulnerability in Yokogawa Widefield3, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 2.8/10. Published 2022-03-18.

How severe is CVE-2020-16232?

Low severity. CVSS v3 base score is 2.8 out of 10.

Buffer overflow in Yokogawa Widefield3

CVE-2020-16232

In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file.

Vulnerability class: Buffer Overflow

EPSS: 0.007 (50.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.8 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L.

Affected products

Yokogawa Widefield3 — versions R1.01

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

ics-cert@hq.dhs.gov (x_refsource_CONFIRM, US Government Resource, Third Party Advisory, Mitigation)
ics-cert@hq.dhs.gov (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-16232?: CVE-2020-16232 is a low-severity vulnerability in Yokogawa Widefield3, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 2.8/10. Published 2022-03-18.
How severe is CVE-2020-16232?: Low severity. CVSS v3 base score is 2.8 out of 10.