Read the docs

Horner Automation

Records40All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high38CVSS 7.0–8.9

Exploited now

Horner Automation records in CISA KEV

No Horner Automation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cscape 28 records LOW Cscape Envisionrv 11 records LOW Cscape Envision Rv 3 records LOW Rcc972 Firmware 3 records MEDIUM

Records

28 records in Cscape · all components

TI-2022-12696 CVE-2022-30540 · GHSA-g822-h382-cv3p

Heap-based buffer overflow in Horner Automation Cscape Csfont

Priority LOW 38

The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01046 Published 2022-06-01 Fixed in Versions 9.90 SP5 (v9.90.196) CWE-122
TI-2022-11950 CVE-2022-29488 · GHSA-j8c5-8fhm-5vqg

Out-of-bounds read in Horner Automation Cscape Csfont

Priority LOW 38

The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00947 Published 2022-06-01 Fixed in Versions 9.90 SP5 (v9.90.196) CWE-125
TI-2022-11334 CVE-2022-28690 · GHSA-7273-hmfq-x6vx

Out-of-bounds write in Horner Automation Cscape Csfont

Priority LOW 38

The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00947 Published 2022-06-01 Fixed in Versions 9.90 SP5 (v9.90.196) CWE-787
TI-2022-10308 CVE-2022-27184 · GHSA-p8f6-2wqp-5c4x

Out-of-bounds write in Horner Automation Cscape Csfont

Priority LOW 38

The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00923 Published 2022-06-01 Fixed in Versions 9.90 SP5 (v9.90.196) CWE-787
TI-2019-10177 CVE-2019-13545 · GHSA-mqcx-cq92-w542

Out-of-bounds write in Horner Automation Cscape

Priority LOW 38

In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01939 Published 2019-10-18 No fix listed CWE-787
TI-2019-10173 CVE-2019-13541 · GHSA-frmx-xhpv-82x8

Improper input validation in Horner Automation Cscape

Priority LOW 38

In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01939 Published 2019-10-18 No fix listed CWE-20
TI-2021-05556 CVE-2021-22663 · GHSA-2xjp-jvqv-hvj5

Out-of-bounds read in Cscape

Priority LOW 37

Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01404 Published 2021-02-09 No fix listed CWE-125
TI-2018-13469 CVE-2018-19005 · GHSA-frqm-prhr-9f2c

Improper input validation in Cscape

Priority LOW 37

Cscape, Version 9.80.75.3 SP3 and prior.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0167 Published 2018-12-20 No fix listed CWE-20
TI-2023-13871 CVE-2023-29503 · GHSA-8jwf-4fqw-cf73

Stack-based buffer overflow in Horner Automation Cscape

Priority LOW 36

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0023 Published 2023-06-06 No fix listed CWE-121
TI-2023-13171 CVE-2023-28653 · GHSA-7vjf-c5mj-643c

Use after free in Horner Automation Cscape

Priority LOW 36

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00238 Published 2023-06-06 No fix listed CWE-416
TI-2022-03123 CVE-2022-3379 · GHSA-q4w7-f882-h6hc

Out-of-bounds write in Horner Automation Cscape

Priority LOW 36

Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00255 Published 2022-10-27 No fix listed CWE-787
TI-2021-12603 CVE-2021-32995 · GHSA-8phr-8wxp-777p

Out-of-bounds write in Cscape

Priority LOW 36

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00995 Published 2021-08-25 No fix listed CWE-787
TI-2021-12583 CVE-2021-32975 · GHSA-j9g4-rrpx-x359

Out-of-bounds read in Cscape

Priority LOW 36

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-08-25 No fix listed CWE-125
TI-2021-05571 CVE-2021-22678 · GHSA-r249-pphh-pcj9

Improper input validation in Cscape

Priority LOW 36

Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0103 Published 2021-04-23 No fix listed CWE-20
TI-2023-15827 CVE-2023-32545 · GHSA-vx55-hxqp-xhm8

Out-of-bounds read in Horner Automation Cscape

Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
TI-2023-15821 CVE-2023-32539 · GHSA-68p8-fgjv-fv2m

Horner Automation Cscape Out-of-bounds Write

Priority LOW 35

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-787
TI-2023-15585 CVE-2023-32289 · GHSA-r4vw-gj85-84vr

Out-of-bounds read in Horner Automation Cscape

Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
TI-2023-15579 CVE-2023-32281 · GHSA-2jhq-65q3-jpx9

Out-of-bounds read in Horner Automation Cscape

Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
TI-2023-15502 CVE-2023-32203 · GHSA-v8jw-x2rh-r52c

Horner Automation Cscape Out-of-bounds Write

Priority LOW 35

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-787
TI-2023-14962 CVE-2023-31278 · GHSA-2pww-2c9q-m4hw

Horner Automation Cscape Out-of-bounds Read

Priority LOW 35

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
Load more
Open these records in search →