hornerautomation
ICS / OT / IoTcommercial
Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting hornerautomation.
- CVE-2023-7206Horner Automation Cscape Stack-Based Buffer Overflow7.8
- CVE-2023-28653 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could ...7.8
- CVE-2023-27916 The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds read. An attacker could leverage this ...7.8
- CVE-2023-29503 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage th...7.8
- CVE-2023-31244 The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the curren...7.8
- CVE-2023-31278Horner Automation Cscape Out-of-bounds Read7.8
- CVE-2023-32203Horner Automation Cscape Out-of-bounds Write7.8
- CVE-2023-32281 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in the FontManager. An attacker coul...7.8
- CVE-2023-32289 The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds read in IO_CFG. An attacker could leve...7.8
- CVE-2023-32539Horner Automation Cscape Out-of-bounds Write7.8
- CVE-2023-32545 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in Cscape!CANPortMigration. An a...7.8
- CVE-2023-0621CVE-2023-06217.8
- CVE-2023-0623CVE-2023-06237.8
- CVE-2023-0622CVE-2023-06227.8
- CVE-2022-2642Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device.7.5