Out-of-bounds Read in Horner Automation Cscape
CVE-2025-4098
Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Cscape.
Vulnerability class: Buffer Overflow
EPSS: 0.002 (15.8th percentile) — read the EPSS interpretation.
Affected products
- Horner Automation Cscape — versions 10.0 (10.0.415.2) SP1
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (government-resource)