CVE-2023-7206 | High | 7.8 | 2024-01-15 |
In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which w… |
CVE-2023-32203 | High | 7.8 | 2023-06-06 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CSc… |
CVE-2023-31278 | High | 7.8 | 2023-06-06 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds read. An att… |
CVE-2023-31244 | High | 7.8 | 2023-06-06 |
The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could ex… |
CVE-2023-29503 | High | 7.8 | 2023-06-06 |
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer o… |
CVE-2023-28653 | High | 7.8 | 2023-06-06 |
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-… |
CVE-2023-27916 | High | 7.8 | 2023-06-06 |
The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds… |
CVE-2023-32539 | High | 7.8 | 2023-06-06 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CSc… |
CVE-2023-32289 | High | 7.8 | 2023-06-06 |
The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds… |
CVE-2023-32281 | High | 7.8 | 2023-06-06 |
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds rea… |
CVE-2023-32545 | High | 7.8 | 2023-06-06 |
The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds… |
CVE-2023-0623 | High | 7.8 | 2023-03-09 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validatio… |
CVE-2023-0622 | High | 7.8 | 2023-03-09 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validatio… |
CVE-2023-0621 | High | 7.8 | 2023-03-09 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation… |
CVE-2022-2642 | High | 7.5 | 2022-12-02 | Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from… |
CVE-2022-2641 | Critical | 9.8 | 2022-12-02 | Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes… |
CVE-2022-2640 | High | 7.5 | 2022-12-02 | The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering. This coul… |
CVE-2022-3377 | High | 7.8 | 2022-11-15 | Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an at… |
CVE-2022-3379 | High | 7.8 | 2022-10-27 |
Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an at… |
CVE-2022-3378 | High | 7.8 | 2022-10-27 |
Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an a… |
CVE-2022-30540 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code |
CVE-2022-29488 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code. |
CVE-2022-28690 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code. |
CVE-2022-27184 | High | 7.8 | 2022-06-02 | The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code. |
CVE-2021-44462 | High | 7.8 | 2022-03-25 | This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues resul… |
CVE-2021-33015 | High | 7.8 | 2021-08-25 | Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via… |
CVE-2021-32995 | High | 7.8 | 2021-08-25 | Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An… |
CVE-2021-32975 | High | 7.8 | 2021-08-25 | Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An… |
CVE-2021-22682 | High | 7.8 | 2021-04-23 | Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. Thi… |
CVE-2021-22678 | High | 7.8 | 2021-04-23 | Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An atta… |
CVE-2021-22663 | High | 7.8 | 2021-02-09 | Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. A… |
CVE-2019-13545 | High | 7.8 | 2019-10-18 | In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitra… |
CVE-2019-13541 | High | 7.8 | 2019-10-18 | In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking us… |
CVE-2019-6555 | High | 7.8 | 2019-02-28 | Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker t… |
CVE-2018-19005 | High | 7.8 | 2018-12-20 | Cscape, Version 9.80.75.3 SP3 and prior. An improper input validation vulnerability has been identified that may be exploited by processing specially crafted P… |