Horner Automation

Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device.

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services.

Horner Automation’s RCC 972 firmware version 15.40 contains global variables.

Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files.

Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Csc…

The vulnerability occurs in the parsing of CSP files.

Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary code.

The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code

The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.

The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.

The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering.

In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution.

In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation.

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior.

Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files.

Cscape, 9.80 SP4 and prior.

Cscape, Version 9.80.75.3 SP3 and prior.

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e.

Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e.

Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e.

Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data.

Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data.