CVE-2022-3379

Summary: CVE-2022-3379 affects Horner Automation’s Cscape up to version 9.90 SP7 (and prior). The vulnerability arises from improper validation of user-supplied data in FNT file handling, enabling a local attacker to execute arbitrary code by writing outside the memory buffer when a malicious FNT...

PT-2022-21870 · Horner Automation · Cscape

Name of the Vulnerable Software and Affected Versions: Horner Automation's Cscape version 9.90 SP 7 and prior Description: The issue arises from improper validation of user-supplied data. If a user opens a maliciously formed FNT file, an attacker could execute arbitrary code within the current...

PT-2022-21869 · Horner Automation · Cscape

Name of the Vulnerable Software and Affected Versions: Horner Automation's Cscape versions 9.90 SP 6 and prior Description: The issue arises from improper validation of user-supplied data. If a user opens a maliciously formed FNT file, an attacker could execute arbitrary code within the current...

Horner Automation Cscape

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Horner Automation Equipment: Cscape Vulnerabilities: Out-of-bounds Write, Access of Uninitialized Pointer 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow local attackers to execute arbitrary...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape 9.90 SP 7 and prior versions, which arises from failure to properly validate user-supplied data, and allows...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape 9.90 SP 6 and prior versions, which arises from failure to properly validate user-supplied data. If a user...

Horner Automation Cscape 缓冲区错误漏洞

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape 9.90 SP 7 and prior versions, which arises from failure to properly validate user-supplied data. If a user...

CVE-2022-30540 Horner Automation Cscape Csfont

The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code...

CVE-2022-30540 Horner Automation Cscape Csfont

The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code...

CVE-2022-29488 Horner Automation Cscape Csfont

The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code...

CVE-2022-29488 Horner Automation Cscape Csfont

The affected product is vulnerable to an out-of-bounds read via uninitialized pointer, which may allow an attacker to execute arbitrary code...

CVE-2022-28690 Horner Automation Cscape Csfont

The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code...

CVE-2022-28690 Horner Automation Cscape Csfont

The affected product is vulnerable to an out-of-bounds write via uninitialized pointer, which may allow an attacker to execute arbitrary code...

CVE-2022-27184 Horner Automation Cscape Csfont

The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code...

CVE-2022-27184 Horner Automation Cscape Csfont

The affected product is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code...

PT-2022-19653 · Horner Automation · Horner Automation Cscape Csfont +1

Name of the Vulnerable Software and Affected Versions: Product affected versions not specified Description: The issue allows an out-of-bounds read via an uninitialized pointer, potentially enabling an attacker to execute arbitrary code. Recommendations: At the moment, there is no information abou...

Horner Automation Cscape Csfont Buffer Overflow Vulnerability

Horner Automation Cscape is a set of programming software for industrial control system development from Horner Automation, Inc. A buffer overflow vulnerability exists in Horner Automation Cscape Csfont, which can be exploited by attackers to execute arbitrary code...

Horner Automation Cscape Csfont Out-of-Bounds Reading Vulnerability

Horner Automation Cscape is a programming software for industrial control system development from Horner Automation, Inc. An out-of-bounds read vulnerability exists in Horner Automation Cscape Csfont, which can be exploited by attackers to execute arbitrary code...

Horner Automation Cscape Csfont Out-of-Bounds Write Vulnerability (CNVD-2022-64133)

Horner Automation Cscape is a programming software for industrial control system development from Horner Automation, Inc. An out-of-bounds write vulnerability exists in Horner Automation Cscape Csfont, which can be exploited by attackers to execute arbitrary code...

Horner Automation Cscape Csfont Out-of-Bounds Writing Vulnerability

Horner Automation Cscape is a programming software for industrial control system development from Horner Automation, Inc. An out-of-bounds write vulnerability exists in Horner Automation Cscape Csfont, which can be exploited by attackers to execute arbitrary code...