Read the docs

Horner Automation

Records40All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high38CVSS 7.0–8.9

Exploited now

Horner Automation records in CISA KEV

No Horner Automation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Cscape Envisionrv · all components

Priority LOW 37

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00713 Published 2022-03-25 No fix listed CWE-20
Priority LOW 36

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0023 Published 2023-06-06 No fix listed CWE-121
TI-2023-13171 CVE-2023-28653 · GHSA-7vjf-c5mj-643c

Use after free in Horner Automation Cscape

Priority LOW 36

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00238 Published 2023-06-06 No fix listed CWE-416
Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
TI-2023-15821 CVE-2023-32539 · GHSA-68p8-fgjv-fv2m

Horner Automation Cscape Out-of-bounds Write

Priority LOW 35

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-787
Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
TI-2023-15502 CVE-2023-32203 · GHSA-v8jw-x2rh-r52c

Horner Automation Cscape Out-of-bounds Write

Priority LOW 35

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-787
TI-2023-14962 CVE-2023-31278 · GHSA-2pww-2c9q-m4hw

Horner Automation Cscape Out-of-bounds Read

Priority LOW 35

Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
Priority LOW 35

The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT).

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00227 Published 2023-06-06 No fix listed CWE-125
Open these records in search →