Horner Automation

Records40All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high38CVSS 7.0–8.9

Exploited now

Horner Automation records in CISA KEV

No Horner Automation vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Rcc972 Firmware · all components

TI-2022-02442 CVE-2022-2641 · GHSA-r89f-2wvr-q3c7

MEDIUM 50

Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00586 Published 2022-12-12 No fix listed CWE-321

TI-2022-02443 CVE-2022-2642 · GHSA-vxfj-h2jv-2pgr

MEDIUM 40

Horner Automation’s RCC 972 firmware version 15.40 contains global variables.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00681 Published 2022-12-12 No fix listed CWE-1108

TI-2022-02441 CVE-2022-2640 · GHSA-g2g3-6rcc-6c9q

LOW 38

The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00263 Published 2022-12-12 No fix listed CWE-326