Horner Automation Cscape Envisionrv
11 CVEs affecting Horner Automation Cscape Envisionrv. Latest disclosed: 2023-06-06. Critical: 0, High: 11.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32203 | High | 7.8 | 2023-06-06 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CSc… |
CVE-2023-31278 | High | 7.8 | 2023-06-06 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds read. An att… |
CVE-2023-31244 | High | 7.8 | 2023-06-06 | The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could ex… |
CVE-2023-29503 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer o… |
CVE-2023-28653 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-… |
CVE-2023-27916 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds… |
CVE-2023-32539 | High | 7.8 | 2023-06-06 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CSc… |
CVE-2023-32289 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds… |
CVE-2023-32281 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds rea… |
CVE-2023-32545 | High | 7.8 | 2023-06-06 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds… |
CVE-2021-44462 | High | 7.8 | 2022-03-25 | This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues resul… |