Approved changes feed: RSS · Atom
cpe:2.3:a:horner_automation:cscape:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Horner Automation (cf46fb05-8a61-59d7-82b9-37d5439df822) |
|---|---|
| Product | Cscape (0f256c10-7b24-5e83-8512-a3f727251f70) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12897 |
vulnerable | 2026-07-29 00:23:32.660736 |
Out-of-bounds read in Horner Automation Cscape
Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.
Published: 2026-06-25T17:47:57.893Z
Updated: 2026-06-25T18:31:40.351Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6284 |
vulnerable | 2026-06-08 08:07:04.635635 |
Horner Automation Cscape and XL4, XL7 PLC Weak password requirements
CRITICAL (9.1)
An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible.
Published: 2026-04-17T15:14:06.346Z
Updated: 2026-04-20T14:58:32.621Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4098 |
vulnerable | 2026-06-08 07:29:15.404461 |
Out-of-bounds Read in Horner Automation Cscape
Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Cscape.
Published: 2025-05-08T17:45:03.309Z
Updated: 2025-05-10T00:02:17.453Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9508 |
vulnerable | 2026-06-08 07:00:28.097092 |
Horner Automation Cscape Out-of-bounds Read
HIGH (7.8)
Horner Automation Cscape contains a memory corruption vulnerability, which
could allow an attacker to disclose information and execute arbitrary
code.
Published: 2024-12-13T00:49:03.188Z
Updated: 2024-12-13T21:14:18.861Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12212 |
vulnerable | 2026-06-08 06:23:51.454192 |
Horner Automation Cscape Out-of-bounds Read
HIGH (7.8)
The vulnerability occurs in the parsing of CSP files. The issues result
from the lack of proper validation of user-supplied data, which could
allow reading past the end of allocated data structures, resulting in
execution of arbitrary code.
Published: 2024-12-13T00:50:45.290Z
Updated: 2024-12-13T21:14:45.265Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7206 |
vulnerable | 2026-06-08 06:21:57.269505 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32545 |
vulnerable | 2026-06-08 06:04:46.492931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32539 |
vulnerable | 2026-06-08 06:04:46.478512 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32289 |
vulnerable | 2026-06-08 06:04:45.440074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32281 |
vulnerable | 2026-06-08 06:04:45.332000 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32203 |
vulnerable | 2026-06-08 06:04:45.134595 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31278 |
vulnerable | 2026-06-08 06:04:42.477527 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31244 |
vulnerable | 2026-06-08 06:04:42.428007 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29503 |
vulnerable | 2026-06-08 06:02:40.417846 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28653 |
vulnerable | 2026-06-08 06:01:14.632208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27916 |
vulnerable | 2026-06-08 05:57:42.479910 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3379 |
vulnerable | 2026-06-08 05:48:20.795927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3378 |
vulnerable | 2026-06-08 05:48:20.792435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3377 |
vulnerable | 2026-06-08 05:48:20.781688 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.