Input validation

Cscape, 9.80 SP4 and prior. An improper input validation vulnerability may be exploited by processing specially crafted POC files. This may allow an attacker to read confidential information and remotely execute arbitrary code...

CVE-2019-6555

CVE-2019-6555 affects Horner Automation’s Cscape (versions 9.80 SP4 and earlier). The vulnerability is an improper input validation in CSP file processing, enabling reading of confidential information and remote code execution via specially crafted POC files. MITRE/attack details in connected sou...