# cve.now: Horner Automation

The newest entries naming Horner Automation as an affected vendor (up to 200), of 30 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-12897](https://cve.now/CVE-2026-12897.md): Out-of-bounds read in Horner Automation Cscape (CVSS 8.4)
- [CVE-2026-6284](https://cve.now/CVE-2026-6284.md): Horner Automation Cscape and XL4, XL7 PLC Weak password requirements (CVSS 9.3)
- [CVE-2025-4098](https://cve.now/CVE-2025-4098.md): Out-of-bounds Read in Horner Automation Cscape (CVSS 8.4)
- [CVE-2024-12212](https://cve.now/CVE-2024-12212.md): Horner Automation Cscape Out-of-bounds Read (CVSS 7.8)
- [CVE-2024-9508](https://cve.now/CVE-2024-9508.md): Horner Automation Cscape Out-of-bounds Read (CVSS 7.8)
- [CVE-2023-7206](https://cve.now/CVE-2023-7206.md): Horner Automation Cscape Stack-Based Buffer Overflow (CVSS 7.8)
- [CVE-2023-28653](https://cve.now/CVE-2023-28653.md): The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). (CVSS 7.8)
- [CVE-2023-27916](https://cve.now/CVE-2023-27916.md): The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). (CVSS 7.8)
- [CVE-2023-29503](https://cve.now/CVE-2023-29503.md): The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). (CVSS 7.8)
- [CVE-2023-31244](https://cve.now/CVE-2023-31244.md): The affected product does not properly validate user-supplied data. (CVSS 7.8)
- [CVE-2023-31278](https://cve.now/CVE-2023-31278.md): Horner Automation Cscape Out-of-bounds Read (CVSS 7.8)
- [CVE-2023-32203](https://cve.now/CVE-2023-32203.md): Horner Automation Cscape Out-of-bounds Write (CVSS 7.8)
- [CVE-2023-32281](https://cve.now/CVE-2023-32281.md): The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). (CVSS 7.8)
- [CVE-2023-32289](https://cve.now/CVE-2023-32289.md): The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). (CVSS 7.8)
- [CVE-2023-32539](https://cve.now/CVE-2023-32539.md): Horner Automation Cscape Out-of-bounds Write (CVSS 7.8)
- [CVE-2023-32545](https://cve.now/CVE-2023-32545.md): The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). (CVSS 7.8)
- [CVE-2023-0621](https://cve.now/CVE-2023-0621.md): CVE-2023-0621 (CVSS 7.8)
- [CVE-2023-0623](https://cve.now/CVE-2023-0623.md): CVE-2023-0623 (CVSS 7.8)
- [CVE-2023-0622](https://cve.now/CVE-2023-0622.md): CVE-2023-0622 (CVSS 7.8)
- [CVE-2022-2642](https://cve.now/CVE-2022-2642.md): Horner Automation’s RCC 972 firmware version 15.40 contains global variables. (CVSS 7.5)
- [CVE-2022-2640](https://cve.now/CVE-2022-2640.md): The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse eng (CVSS 7.5)
- [CVE-2022-2641](https://cve.now/CVE-2022-2641.md): Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. (CVSS 9.8)
- [CVE-2022-3377](https://cve.now/CVE-2022-3377.md): Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. (CVSS 7.8)
- [CVE-2022-3378](https://cve.now/CVE-2022-3378.md): Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. (CVSS 7.8)
- [CVE-2022-3379](https://cve.now/CVE-2022-3379.md): Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. (CVSS 7.8)
- [CVE-2022-30540](https://cve.now/CVE-2022-30540.md): Horner Automation Cscape Csfont (CVSS 7.8)
- [CVE-2022-29488](https://cve.now/CVE-2022-29488.md): Horner Automation Cscape Csfont (CVSS 7.8)
- [CVE-2022-28690](https://cve.now/CVE-2022-28690.md): Horner Automation Cscape Csfont (CVSS 7.8)
- [CVE-2022-27184](https://cve.now/CVE-2022-27184.md): Horner Automation Cscape Csfont (CVSS 7.8)
- [CVE-2021-44462](https://cve.now/CVE-2021-44462.md): Horner Automation Cscape EnvisionRV Improper Input Validation (CVSS 7.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/horner-automation
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.