Vulnerabilities

TI-2022-02443 CVE-2022-2642 · GHSA-vxfj-h2jv-2pgr

Horner Automation’s RCC 972 firmware version 15.40 contains global variables.

MEDIUM 40

Horner Automation’s RCC 972 firmware version 15.40 contains global variables.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00681 Published 2022-12-12 No fix listed CWE-1108

TI-2022-02441 CVE-2022-2640 · GHSA-g2g3-6rcc-6c9q

LOW 38

The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00263 Published 2022-12-12 No fix listed CWE-326

TI-2022-02442 CVE-2022-2641 · GHSA-r89f-2wvr-q3c7

MEDIUM 50

Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00586 Published 2022-12-12 No fix listed CWE-321