Hornerautomation

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-30540 1Hornerautomation 1Cscape Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code
CVE-2022-29488 1Hornerautomation 1Cscape Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code.
CVE-2022-28690 1Hornerautomation 1Cscape Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code.
CVE-2022-27184 1Hornerautomation 1Cscape Jun 17, 2026 Jun 2, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.
CVE-2021-44462 1Hornerautomation 1Cscape Envisionrv Jun 17, 2026 Mar 25, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, w...Show more This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures. User interaction is required to exploit this vulnerability as an attacker must trick a valid user to open a malicious HMI project file.Show less
CVE-2021-33015 1Hornerautomation 1Cscape Jun 17, 2026 Aug 25, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vu...Show more Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write via an uninitialized pointer. An attacker could leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2021-32995 1Hornerautomation 1Cscape Jun 17, 2026 Aug 25, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute code i...Show more Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2021-32975 1Hornerautomation 1Cscape Jun 17, 2026 Aug 25, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in...Show more Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2021-22682 1Hornerautomation 1Cscape Jun 17, 2026 Apr 23, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and con...Show more Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to local privilege escalation.Show less
CVE-2021-22678 1Hornerautomation 1Cscape Jun 17, 2026 Apr 23, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the...Show more Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2021-22663 2Hornerautomation Siemens 2Cscape Cscape Jun 17, 2026 Feb 9, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code...Show more Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process.Show less
CVE-2019-13545 1Hornerautomation 1Cscape Jun 17, 2026 Oct 18, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In Horner Automation Cscape 9.90 and prior, improper validation of data may cause the system to write outside the intended buffer area, which may allow arbitrary code execution.
CVE-2019-13541 1Hornerautomation 1Cscape Jun 17, 2026 Oct 18, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access inf...Show more In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access information and remotely execute arbitrary code.Show less
CVE-2019-6555 1Hornerautomation 1Cscape Jun 17, 2026 Feb 28, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrar...Show more Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code.Show less
CVE-2018-19005 1Hornerautomation 1Cscape Nov 21, 2024 Dec 20, 2018 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Cscape, Version 9.80.75.3 SP3 and prior. An improper input validation vulnerability has been identified that may be exploited by processing specially crafted POC files lacking user input validation. This may allow an att...Show more Cscape, Version 9.80.75.3 SP3 and prior. An improper input validation vulnerability has been identified that may be exploited by processing specially crafted POC files lacking user input validation. This may allow an attacker to read confidential information and remotely execute arbitrary code.Show less

Previous 12