Approved changes feed: RSS · Atom

cpe:2.3:a:horner_automation:remote_compact_controller_(rcc)_972:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHorner Automation (cf46fb05-8a61-59d7-82b9-37d5439df822)
ProductRemote Compact Controller (Rcc) 972 (ae229f11-3c23-5a47-9145-ac514a189fbe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2642 vulnerable 2026-06-08 05:43:35.945069 Details available
HIGH (7.5)
Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device.
Published: 2022-12-12T01:50:00.293Z
Updated: 2025-04-16T16:05:11.014Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2641 vulnerable 2026-06-08 05:43:35.944651 Details available
CRITICAL (9.8)
Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition.
Published: 2022-12-12T01:49:10.008Z
Updated: 2025-04-16T16:05:26.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2640 vulnerable 2026-06-08 05:43:35.942186 Details available
HIGH (7.5)
The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering. This could allow an attacker to obtain credentials to run services such as File Transfer Protocol (FTP) and Hypertext Transfer Protocol (HTTP).
Published: 2022-12-12T01:50:00.293Z
Updated: 2025-04-16T16:05:18.798Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.