Horner Automation

Products

ProductCVEsExploitedLatest
Cscape19–Jun 25, 2026
Cscape EnvisionRV11–Jun 6, 2023
Horner Automation Cscape Csfont4–Jun 1, 2022
Cscape Envision RV3–Mar 9, 2023
Remote Compact Controller (RCC) 9723–Dec 12, 2022
XL4 PLC1–Apr 17, 2026
XL7 PLC1–Apr 17, 2026

Exploited and recent CVEs

  • CVE-2026-12897 High 8.4 Out-of-bounds read in Horner Automation Cscape 0.2%
  • CVE-2026-6284 Critical 9.1 Horner Automation Cscape and XL4, XL7 PLC Weak password requirements 0.4%
  • CVE-2026-6284 Critical 9.1 Horner Automation Cscape and XL4, XL7 PLC Weak password requirements 0.4%
  • CVE-2026-6284 Critical 9.1 Horner Automation Cscape and XL4, XL7 PLC Weak password requirements 0.4%
  • CVE-2025-4098 High 8.4 Out-of-bounds Read in Horner Automation Cscape 0.3%
  • CVE-2024-12212 High 7.8 Horner Automation Cscape Out-of-bounds Read 0.2%
  • CVE-2024-9508 High 7.8 Horner Automation Cscape Out-of-bounds Read 0.2%
  • CVE-2023-7206 High 7.8 Horner Automation Cscape Stack-Based Buffer Overflow 0.2%
  • CVE-2023-28653 High 7.8 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could lev 0.2%
  • CVE-2023-28653 High 7.8 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a use-after-free vulnerability. An attacker could lev 0.2%
  • CVE-2023-27916 High 7.8 The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds read. An attacker could leverage this vul 0.2%
  • CVE-2023-27916 High 7.8 The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT). This could lead to an out-of-bounds read. An attacker could leverage this vul 0.2%
  • CVE-2023-29503 High 7.8 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage this 0.2%
  • CVE-2023-29503 High 7.8 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to a stack-based buffer overflow. An attacker could leverage this 0.2%
  • CVE-2023-31244 High 7.8 The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current p 0.2%
  • CVE-2023-31244 High 7.8 The affected product does not properly validate user-supplied data. If a user opens a maliciously formed CSP file, then an attacker could execute arbitrary code within the current p 0.2%
  • CVE-2023-31278 High 7.8 Horner Automation Cscape Out-of-bounds Read 0.2%
  • CVE-2023-31278 High 7.8 Horner Automation Cscape Out-of-bounds Read 0.2%
  • CVE-2023-32203 High 7.8 Horner Automation Cscape Out-of-bounds Write 0.2%
  • CVE-2023-32203 High 7.8 Horner Automation Cscape Out-of-bounds Write 0.2%
  • CVE-2023-32281 High 7.8 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in the FontManager. An attacker could l 0.2%
  • CVE-2023-32281 High 7.8 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in the FontManager. An attacker could l 0.2%
  • CVE-2023-32289 High 7.8 The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds read in IO_CFG. An attacker could leverag 0.2%
  • CVE-2023-32289 High 7.8 The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of-bounds read in IO_CFG. An attacker could leverag 0.2%
  • CVE-2023-32539 High 7.8 Horner Automation Cscape Out-of-bounds Write 0.2%
  • CVE-2023-32539 High 7.8 Horner Automation Cscape Out-of-bounds Write 0.2%
  • CVE-2023-32545 High 7.8 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in Cscape!CANPortMigration. An atta 0.2%
  • CVE-2023-32545 High 7.8 The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-bounds read in Cscape!CANPortMigration. An atta 0.2%
  • CVE-2023-0621 High 7.8 CVE-2023-0621 0.2%
  • CVE-2023-0623 High 7.8 CVE-2023-0623 0.2%