Horner Automation vulnerabilities
30 CVEs and advisories name Horner Automation as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-12897Out-of-bounds read in Horner Automation Cscape
- CVE-2026-6284Horner Automation Cscape and XL4, XL7 PLC Weak password requirements
- CVE-2025-4098Out-of-bounds Read in Horner Automation Cscape
- CVE-2024-12212Horner Automation Cscape Out-of-bounds Read
- CVE-2024-9508Horner Automation Cscape Out-of-bounds Read
- CVE-2023-7206Horner Automation Cscape Stack-Based Buffer Overflow
- CVE-2023-28653 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).
- CVE-2023-27916 The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT).
- CVE-2023-29503 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).
- CVE-2023-31244 The affected product does not properly validate user-supplied data.
- CVE-2023-31278Horner Automation Cscape Out-of-bounds Read
- CVE-2023-32203Horner Automation Cscape Out-of-bounds Write
- CVE-2023-32281 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).
- CVE-2023-32289 The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP).
- CVE-2023-32539Horner Automation Cscape Out-of-bounds Write
- CVE-2023-32545 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP).
- CVE-2023-0621CVE-2023-0621
- CVE-2023-0623CVE-2023-0623
- CVE-2023-0622CVE-2023-0622
- CVE-2022-2642Horner Automation’s RCC 972 firmware version 15.40 contains global variables.
- CVE-2022-2640The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse eng
- CVE-2022-2641Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device.
- CVE-2022-3377Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data.
- CVE-2022-3378 Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data.
- CVE-2022-3379 Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data.
- CVE-2022-30540Horner Automation Cscape Csfont
- CVE-2022-29488Horner Automation Cscape Csfont
- CVE-2022-28690Horner Automation Cscape Csfont
- CVE-2022-27184Horner Automation Cscape Csfont
- CVE-2021-44462Horner Automation Cscape EnvisionRV Improper Input Validation