[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9SsVLz9T0KGmbVjbJc_7jvWEi-Nt5knZ-jpBL7fTSuQ":3,"g5a-risk:CVE-2022-26507":171},{"success":4,"data":5,"meta":169},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":37,"references":78,"referencesCount":91,"weaknesses":92,"weaknessesCount":101,"isActivelyExploited":102,"cisaInfo":27,"otxData":27,"relatedBlogPosts":103,"seoMetadata":104,"configurations":129,"relatedVendorCves":167,"notableEvents":168},"CVE-2022-26507","What is CVE-2022-26507?","A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21825, CVE-2021-21826, CVE-2021-21828, CVE-2021-21829, or CVE-2021-21830. NOTE: This vulnerability only affects products that are no longer supported by the maintainer","A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This...","2022-04-14T13:15:11.637","2024-08-03T05:16:23.51",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.02423,[39,39,39,39,39,39,39],"Critical",[43,48,53,56,59,63,66,69,72,75],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"att","xmill","0.7","cpe:2.3:a:att:xmill:0.7:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"schneider-electric","ecostruxure_control_expert","*","cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"15.1","cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.1:-:*:*:*:*:*:*",{"vendor":49,"product":57,"version":51,"criteria":58,"vulnerable":4},"ecostruxure_process_expert","cpe:2.3:a:schneider-electric:ecostruxure_process_expert:*:*:*:*:*:*:*:*",{"vendor":49,"product":60,"version":61,"criteria":62,"vulnerable":4},"scadapack_470","-","cpe:2.3:h:schneider-electric:scadapack_470:-:*:*:*:*:*:*:*",{"vendor":49,"product":64,"version":61,"criteria":65,"vulnerable":4},"scadapack_474","cpe:2.3:h:schneider-electric:scadapack_474:-:*:*:*:*:*:*:*",{"vendor":49,"product":67,"version":61,"criteria":68,"vulnerable":4},"scadapack_570","cpe:2.3:h:schneider-electric:scadapack_570:-:*:*:*:*:*:*:*",{"vendor":49,"product":70,"version":61,"criteria":71,"vulnerable":4},"scadapack_574","cpe:2.3:h:schneider-electric:scadapack_574:-:*:*:*:*:*:*:*",{"vendor":49,"product":73,"version":61,"criteria":74,"vulnerable":4},"scadapack_575","cpe:2.3:h:schneider-electric:scadapack_575:-:*:*:*:*:*:*:*",{"vendor":49,"product":76,"version":61,"criteria":77,"vulnerable":4},"remoteconnect","cpe:2.3:a:schneider-electric:remoteconnect:-:*:*:*:*:*:*:*",[79,85],{"url":80,"source":81,"tags":82},"https:\u002F\u002FClaroty.com","Claroty",[83,84],"Not Applicable","Third Party Advisory",{"url":86,"source":87,"tags":88},"https:\u002F\u002Fdownload.schneider-electric.com\u002Ffiles?p_Doc_Ref=SEVD-2021-222-02","Schneider-electric",[89,90,84],"Mitigation","Release Notes",2,[93],{"id":94,"name":95,"description":96,"extendedDescription":97,"status":98,"abstraction":99,"structure":100},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":105,"metaDescription":106,"keywords":107,"canonicalUrl":108,"structuredData":109},"What is CVE-2022-26507? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-26507, a critical severity cyber security vulnerability from 2022. A heap-based buffer overflow exists in XML Decompressio...","CVE-2022-26507, CVE-2022-26507 vulnerability, CVE-2022-26507 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, att security, schneider-electric security, xmill vulnerability, ecostruxure_control_expert vulnerability, ecostruxure_process_expert vulnerability, scadapack_470 vulnerability, scadapack_474 vulnerability","\u002Fwhat-is\u002Fcve-2022-26507",{"@context":110,"@type":111,"headline":105,"description":106,"datePublished":10,"dateModified":11,"author":112,"publisher":116,"about":120,"mainEntityOfPage":124,"articleSection":127,"keywords":128},"https:\u002F\u002Fschema.org","TechArticle",{"@type":113,"name":114,"url":115},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":113,"name":114,"url":115,"logo":117},{"@type":118,"url":119},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":121,"name":6,"description":122,"additionalType":123},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":125,"@id":126},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-26507","Cybersecurity","CVE-2022-26507, CVE-2022-26507 vulnerability, CVE-2022-26507 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[130,137,148],{"Operator":27,"Negate":27,"Nodes":131},[132],{"Operator":133,"Negate":27,"CPEMatch":134},"OR",[135],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":136,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4CC987F6-AAFA-4CDE-842D-EA7858A3E7F4",{"Operator":27,"Negate":27,"Nodes":138},[139],{"Operator":133,"Negate":27,"CPEMatch":140},[141,143,145],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":142,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":54,"VersionEndIncluding":27},"8DCC0C29-32C2-4463-B98F-AB4B56FF5314",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":144,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"78F6B1CC-488B-48E8-B96B-77A1894E9E92",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":146,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":147,"VersionEndIncluding":27},"FAB4A9EC-96A2-424D-A858-162E662EBEFB","2021",{"Operator":149,"Negate":27,"Nodes":150},"AND",[151,163],{"Operator":133,"Negate":27,"CPEMatch":152},[153,155,157,159,161],{"Vulnerable":27,"Criteria":62,"MatchCriteriaID":154,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F51A7887-4F1A-428C-9E68-260E7262A678",{"Vulnerable":27,"Criteria":65,"MatchCriteriaID":156,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"58BACC54-6609-4DCE-AEEC-A9C2396635A0",{"Vulnerable":27,"Criteria":68,"MatchCriteriaID":158,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FFDF44F3-2514-4CB0-A1A4-87123225B0F1",{"Vulnerable":27,"Criteria":71,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4F5CDC99-C4C8-43FE-8EA7-65C7EDFD9BA3",{"Vulnerable":27,"Criteria":74,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DE4172DF-94E3-4AEE-8D6B-9F48DC453B9E",{"Operator":133,"Negate":27,"CPEMatch":164},[165],{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":166,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3FFDF36B-30A5-4B35-956C-60DC15CE7EE4",[],[],{"lastModified":11,"cacheTime":170,"version":33},1792375432808,{"score":172,"band":173,"action":174,"scoredAt":175},55,"Medium","Plan remediation","2026-10-16T06:54:09.592844+00:00"]