Hornerautomation
Hornerautomation Cscape: vulnerabilidades y CVE
Hornerautomation Cscape tiene 31 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE31
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-12897 | Alta (8.4) | 0.18% | — | 25 jun 2026 | Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose… |
| CVE-2025-4098 | Alta (8.4) | 0.29% | — | 8 may 2025 | Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of… |
| CVE-2024-9508 | Alta (8.5) | 0.19% | — | 13 dic 2024 | Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary code. |
| CVE-2023-7206 | Alta (7.8) | 0.21% | — | 15 ene 2024 | In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected… |
| CVE-2023-32203 | Alta (7.8) | 0.23% | — | 6 jun 2023 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e374b. An attacker could leverage this… |
| CVE-2023-31278 | Alta (7.8) | 0.23% | — | 6 jun 2023 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially… |
| CVE-2023-31244 | Alta (7.8) | 0.23% | — | 6 jun 2023 | The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current process by accessing an uninitialized… |
| CVE-2023-29503 | Alta (7.8) | 0.23% | — | 6 jun 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage this vulnerability to execute… |
| CVE-2023-28653 | Alta (7.8) | 0.24% | — | 6 jun 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could leverage this vulnerability to execute… |
| CVE-2023-27916 | Alta (7.8) | 0.23% | — | 6 jun 2023 | The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to potentially execute… |
| CVE-2023-32539 | Alta (7.8) | 0.23% | — | 6 jun 2023 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e3c04. An attacker could leverage this… |
| CVE-2023-32289 | Alta (7.8) | 0.23% | — | 6 jun 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds read in IO_CFG. An attacker could leverage this vulnerability to… |
| CVE-2023-32281 | Alta (7.8) | 0.23% | — | 6 jun 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in the FontManager. An attacker could leverage this vulnerability… |
| CVE-2023-32545 | Alta (7.8) | 0.23% | — | 6 jun 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in Cscape!CANPortMigration. An attacker could leverage this… |
| CVE-2022-3377 | Alta (7.8) | 0.25% | — | 15 nov 2022 | Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current… |
| CVE-2022-3379 | Alta (7.8) | 0.24% | — | 27 oct 2022 | Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current… |
| CVE-2022-3378 | Alta (7.8) | 0.25% | — | 27 oct 2022 | Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute arbitrary code within the current… |
| CVE-2022-30540 | Alta (7.8) | 1.0% | — | 2 jun 2022 | The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code |
| CVE-2022-29488 | Alta (7.8) | 0.91% | — | 2 jun 2022 | The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code. |
| CVE-2022-28690 | Alta (7.8) | 0.91% | — | 2 jun 2022 | The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code. |
| CVE-2022-27184 | Alta (7.8) | 0.89% | — | 2 jun 2022 | The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code. |
| CVE-2021-33015 | Alta (7.8) | 1.00% | — | 25 ago 2021 | Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this… |
| CVE-2021-32995 | Alta (7.8) | 1.00% | — | 25 ago 2021 | Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute code… |
| CVE-2021-32975 | Alta (7.8) | 0.97% | — | 25 ago 2021 | Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code… |
| CVE-2021-22682 | Alta (7.8) | 0.22% | — | 23 abr 2021 | Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and… |
| CVE-2021-22678 | Alta (7.8) | 1.0% | — | 23 abr 2021 | Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in… |
| CVE-2021-22663 | Alta (7.8) | 1.3% | — | 9 feb 2021 | Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code… |
| CVE-2019-13545 | Alta (7.8) | 1.9% | — | 18 oct 2019 | In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution. |
| CVE-2019-13541 | Alta (7.8) | 1.9% | — | 18 oct 2019 | In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access… |
| CVE-2019-6555 | Alta (7.8) | 1.7% | — | 28 feb 2019 | Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute… |