GCVE - cpe:2.3:a:hornerautomation:cscape:9.90:sp8:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hornerautomation:cscape:9.90:sp8:*:*:*:*:*:*

part: a version: 9.90 update: sp8

Vendor	Hornerautomation (`e8fb892d-d647-5dbb-8edb-27b63048a341`)
Product	Cscape (`f771f74b-24e1-5c86-83b3-c7dd8e29ca0d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-7206`	vulnerable	2026-06-08 06:21:57.280991	Horner Automation Cscape Stack-Based Buffer Overflow HIGH (7.8) In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape. Published: 2024-01-15T22:22:01.676Z Updated: 2024-11-13T21:23:40.535Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-04 https://hornerautomation.com/cscape-software/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32545`	vulnerable	2026-06-08 06:04:46.493003	Details available HIGH (7.8) The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in Cscape!CANPortMigration. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. Published: 2023-06-06T14:51:49.298Z Updated: 2025-01-07T18:08:04.567Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32539`	vulnerable	2026-06-08 06:04:46.478692	Horner Automation Cscape Out-of-bounds Write HIGH (7.8) Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-bounds write at CScape_EnvisionRV+0x2e3c04. An attacker could leverage this vulnerability to potentially execute arbitrary code in the context of the current process. Published: 2023-06-06T15:11:19.755Z Updated: 2025-01-07T16:35:27.882Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32289`	vulnerable	2026-06-08 06:04:45.440136	Details available HIGH (7.8) The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds read in IO_CFG. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. Published: 2023-06-06T15:13:13.877Z Updated: 2025-01-07T16:33:27.970Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32281`	vulnerable	2026-06-08 06:04:45.332166	Details available HIGH (7.8) The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in the FontManager. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process. Published: 2023-06-06T15:15:17.540Z Updated: 2025-01-07T16:32:12.183Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-23-143-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32203`	vulnerable	2026-06-08 06:04:45.134677	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-31278`	vulnerable	2026-06-08 06:04:42.477681	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-31244`	vulnerable	2026-06-08 06:04:42.429591	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29503`	vulnerable	2026-06-08 06:02:40.419734	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-28653`	vulnerable	2026-06-08 06:01:14.632396	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-27916`	vulnerable	2026-06-08 05:57:42.481405	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.