CVE-2019-13541

CVE-2019-13541 affects Horner Automation Cscape 9.90 and earlier, due to an improper input validation issue in processing files (notably CSP file parsing), enabling potential arbitrary code execution. Connected advisories cite memory corruption risks and local/contextual exploitation paths, with ...

CVE-2019-13545

CVE-2019-13545 affects Horner Automation Cscape (versions 9.90 and earlier). The vulnerability is an out-of-bounds write caused by improper validation of data, which may allow arbitrary code execution. Related advisories describe a CSP-file parsing path and imply remote/code execution scenarios, ...

CVE-2022-30540

The CVE-2022-30540 entry relates to Horner Automation Cscape Csfont. The vulnerability is a heap-based buffer overflow via an uninitialized pointer, which could allow an attacker to execute arbitrary code. Affected product: Cscape Csfont (versions up to 9.90 SP5). Impact is high (C:H/I:H/A:H) per...

CVE-2022-3377

Summary: CVE-2022-3377 affects Horner Automation’s Cscape, specifically versions 9.90 SP 6 and prior. The issue is an improper validation of user-supplied data when opening a maliciously formed FNT file, leading to an out-of-bounds memory read due to an uninitialized pointer and potentially arbit...

CVE-2022-27184

CVE-2022-27184 affects Horner Automation Cscape Csfont. The vulnerability is an out-of-bounds write (via an uninitialized pointer) that may allow an attacker to execute arbitrary code. Affected product/version: Horner Automation Cscape Csfont up to version 9.90 SP5 (v9.90.196) and prior. Mitigati...

CVE-2022-29488

The CVE-2022-29488 issue affects Horner Automation Cscape Csfont. According to CVE records and the ICS advisory, it is an out-of-bounds read via an uninitialized pointer in Csfont that could enable arbitrary code execution. Affected product/version details from publicly documented sources indicat...

CVE-2022-28690

The CVE-2022-28690 issue affects Horner Automation Cscape Csfont and is described as an out-of-bounds write via an uninitialized pointer that may allow arbitrary code execution. Public sources in the Connected documents associate this vulnerability with Csfont (versions prior to 9.90 SP6) and lis...

CVE-2021-22663

CVE-2021-22663 affects Horner Automation Cscape (all versions prior to 9.90 SP3.5). The vulnerability stems from improper validation of user-supplied data when parsing project files, causing an out-of-bounds read and enabling code execution in the context of the affected process. Affected version...

CVE-2022-3379

Summary: CVE-2022-3379 affects Horner Automation’s Cscape up to version 9.90 SP7 (and prior). The vulnerability arises from improper validation of user-supplied data in FNT file handling, enabling a local attacker to execute arbitrary code by writing outside the memory buffer when a malicious FNT...

CVE-2023-28653

Summary of CVE-2023-28653 : Horner Automation Cscape and Cscape EnvisionRV are affected by a vulnerability caused by insufficient validation of user-supplied data when parsing project files (e.g., CSP), which can lead to a use-after-free and arbitrary code execution in the current process. Affect...

CVE-2019-6555

CVE-2019-6555 affects Horner Automation’s Cscape (versions 9.80 SP4 and earlier). The vulnerability is an improper input validation in CSP file processing, enabling reading of confidential information and remote code execution via specially crafted POC files. MITRE/attack details in connected sou...

CVE-2023-29503

Summary of CVE-2023-29503 (Horner Automation Cscape/Cscape EnvisionRV) Quellen confirm a stack-based buffer overflow caused by improper validation of user-supplied data when parsing project files (e.g., CSP). Affected products include Horner Automation Cscape (v9.90 SP8) and Cscape EnvisionRV (v4...

CVE-2023-7206

The CVE-2023-7206 issue affects Horner Automation Cscape, specifically versions 9.90 SP10 and earlier. It is a stack-based buffer overflow vulnerability in Cscape when a user opens a malicious CSP file, allowing local attackers to execute arbitrary code on affected installations. The root cause, ...

CVE-2018-19005

CVE-2018-19005 concerns Horner Automation Cscape CSP file parsing vulnerabilities. The connected advisories (ZDI-18-1434/1435/1436/1437/1438/1439/1441/1442 and related entries) describe multiple remote code execution flaws stemming from parsing CSP files, caused by lack of proper validation of us...

CVE-2022-3378

CVE-2022-3378 affects Horner Automation's Cscape (versions 9.90 SP 7 and prior). The vulnerability arises from improper validation of user-supplied data in FNT files, allowing an attacker to run code in the current process by accessing an uninitialized pointer, which can cause an out-of-bounds me...

CVE-2021-22678

CVE-2021-22678 affects Horner Automation Cscape: all versions before 9.90 SP4 are vulnerable due to improper validation of user-supplied data when parsing project files, causing memory corruption and allowing code execution in the current process. Public sources (NVD/Red Hat/NVD mirrors and CISA ...

CVE-2021-33015

CVE-2021-33015 affects Cscape: all versions prior to 9.90 SP5 lack proper validation of user-supplied data when parsing project files, causing an out-of-bounds write via an uninitialized pointer and enabling code execution in the current process. Affected product: Horner Automation Cscape (indust...

CVE-2023-32539

CVE-2023-32539 affects Horner Automation Cscape (Cscape v9.90 SP8 and Cscape EnvisionRV v4.70) with an out-of-bounds write caused by improper validation of user-supplied data when parsing project files (e.g., HMI). The available connected sources describe a stack-based/out-of-bounds write that co...

CVE-2023-31278

CVE-2023-31278 affects Horner Automation’s Cscape/Cscape EnvisionRV where parsing project files (e.g., HMI) can fail to validate user-supplied data, causing an out-of-bounds read that could enable arbitrary code execution in the current process. The NVD entry notes a base score of 7.8 (HIGH) with...

CVE-2023-32203

CVE-2023-32203 affects Horner Automation Cscape and EnvisionRV. The vulnerability stems from improper validation of user-supplied data when parsing project files (e.g., CSP/HMI), leading to an out-of-bounds write (CScape_EnvisionRV+0x2e374b) that could allow arbitrary code execution in the curren...

CVE-2023-32281

CVE-2023-32281 corresponds to a vulnerability in Horner Automation software where parsing CSP project files can trigger an out-of-bounds read in the FontManager, potentially allowing arbitrary code execution in the affected process. The issue is tied to improper validation of user-supplied data d...

CVE-2021-32995

CVE-2021-32995 affects Horner Automation Cscape (all versions prior to 9.90 SP5). The vulnerability arises from improper validation of user-supplied data when parsing project files, leading to an out-of-bounds write and potential code execution in the current process. The CVSS data indicates a lo...

CVE-2023-31244

The CVE-2023-31244 issue affects Horner Automation Cscape and Cscape EnvisionRV where CSP file parsing fails to validate user-supplied data, allowing an attacker to execute arbitrary code via an uninitialized pointer. The root cause is improper handling/validation during CSP file processing, enab...

CVE-2023-32545

The CVE-2023-32545 entry concerns Horner Automation’s Cscape software (Cscape v9.90 SP8 and Cscape EnvisionRV v4.70) where parsing of project files (e.g., CSP) lacks proper validation of user-supplied data, enabling an out-of-bounds read in CANPortMigration and potentially allowing code execution...

CVE-2021-32975

CVE-2021-32975 affects Horner Automation Cscape: all versions prior to 9.90 SP5. The vulnerability arises from lack of proper validation of user-supplied data when parsing project files, which can cause an out-of-bounds read and enable code execution in the context of the current process. Exploit...

CVE-2021-22682

CVE-2021-22682 affects Horner Automation Cscape prior to version 9.90 SP4. The root issue is improper access control: the product is configured by default to be installed for all users, granting full permissions (read/write) to unprivileged users, which can lead to local privilege escalation by m...

CVE-2023-32289

The CVE-2023-32289 entry describes a vulnerability in Horner Automation Cscape and Cscape EnvisionRV where improper validation of user-supplied data when parsing project files (e.g., CSP) can cause an out-of-bounds read in IO_CFG, potentially enabling arbitrary code execution in the current proce...

CVE-2023-27916

CVE-2023-27916 affects Horner Automation Cscape and Cscape EnvisionRV. It is caused by improper validation of user-supplied data when parsing font files (e.g., FNT), which can lead to an out-of-bounds read and potentially allow arbitrary code execution in the current process. Mitigations from CIS...