Horner Automation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Cscape | 19 | – | Jun 25, 2026 |
| Cscape EnvisionRV | 11 | – | Jun 6, 2023 |
| Horner Automation Cscape Csfont | 4 | – | Jun 1, 2022 |
| Cscape Envision RV | 3 | – | Mar 9, 2023 |
| Remote Compact Controller (RCC) 972 | 3 | – | Dec 12, 2022 |
| XL4 PLC | 1 | – | Apr 17, 2026 |
| XL7 PLC | 1 | – | Apr 17, 2026 |
Exploited and recent CVEs
- CVE-2026-12897 Out-of-bounds read in Horner Automation Cscape 0.2%
- CVE-2026-6284 Horner Automation Cscape and XL4, XL7 PLC Weak password requirements 0.4%
- CVE-2026-6284 Horner Automation Cscape and XL4, XL7 PLC Weak password requirements 0.4%
- CVE-2026-6284 Horner Automation Cscape and XL4, XL7 PLC Weak password requirements 0.4%
- CVE-2025-4098 Out-of-bounds Read in Horner Automation Cscape 0.3%
- CVE-2024-12212 Horner Automation Cscape Out-of-bounds Read 0.2%
- CVE-2024-9508 Horner Automation Cscape Out-of-bounds Read 0.2%
- CVE-2023-7206 Horner Automation Cscape Stack-Based Buffer Overflow 0.2%
- CVE-2023-28653 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could lev 0.2%
- CVE-2023-28653 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could lev 0.2%
- CVE-2023-27916 The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds read. An attacker could leverage this vul 0.2%
- CVE-2023-27916 The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds read. An attacker could leverage this vul 0.2%
- CVE-2023-29503 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage this 0.2%
- CVE-2023-29503 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage this 0.2%
- CVE-2023-31244 The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current p 0.2%
- CVE-2023-31244 The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current p 0.2%
- CVE-2023-31278 Horner Automation Cscape Out-of-bounds Read 0.2%
- CVE-2023-31278 Horner Automation Cscape Out-of-bounds Read 0.2%
- CVE-2023-32203 Horner Automation Cscape Out-of-bounds Write 0.2%
- CVE-2023-32203 Horner Automation Cscape Out-of-bounds Write 0.2%
- CVE-2023-32281 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in the FontManager. An attacker could l 0.2%
- CVE-2023-32281 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in the FontManager. An attacker could l 0.2%
- CVE-2023-32289 The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds read in IO_CFG. An attacker could leverag 0.2%
- CVE-2023-32289 The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds read in IO_CFG. An attacker could leverag 0.2%
- CVE-2023-32539 Horner Automation Cscape Out-of-bounds Write 0.2%
- CVE-2023-32539 Horner Automation Cscape Out-of-bounds Write 0.2%
- CVE-2023-32545 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in Cscape!CANPortMigration. An atta 0.2%
- CVE-2023-32545 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in Cscape!CANPortMigration. An atta 0.2%
- CVE-2023-0621 CVE-2023-0621 0.2%
- CVE-2023-0623 CVE-2023-0623 0.2%