Hornerautomation develops automation control software and firmware for industrial controllers and embedded systems, with a modest but strategically important footprint in process control and manufacturing environments. The vendor's vulnerability exposure concentrates in a small product portfolio—principally the Cscape engineering environment, Cscape Envision visualization platform, and RCC972 controller firmware—and recurs through memory-safety and input-validation weakness classes including out-of-bounds writes and reads, buffer overflows, and access of uninitialized pointers. These weakness patterns reflect the lower-level, firmware-oriented nature of the products and their role in direct hardware interaction, where memory corruption can propagate to unsafe controller states. Defenders deploying these automation platforms should prioritize patching and network segmentation given the operational-technology context; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Hornerautomation over time
Signals from CVEs in this vendor scope (37 CVEs).
37 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-2641CRITICAL Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remot | Dec 2, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-3377HIGH Horner Automation's Cscape version 9.90 SP 6 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute | Nov 15, 2022 | 7.8 | 26 | NO | NO |
CVE-2022-2642HIGH Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device. | Dec 2, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-2640HIGH The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering. This could allow an attacker t | Dec 2, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-3379HIGH
Horner Automation's Cscape version 9.90 SP7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute | Oct 27, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-3378HIGH
Horner Automation's Cscape version 9.90 SP 7 and prior does not properly validate user-supplied data. If a user opens a maliciously formed FNT file, then an attacker could execute | Oct 27, 2022 | 7.8 | 25 | NO | NO |
CVE-2021-22678HIGH Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage t | Apr 23, 2021 | 7.8 | 25 | NO | NO |
CVE-2018-19005HIGH Cscape, Version 9.80.75.3 SP3 and prior. An improper input validation vulnerability has been identified that may be exploited by processing specially crafted POC files lacking user | Dec 20, 2018 | 7.8 | 25 | NO | NO |
CVE-2023-0622HIGH Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied da | Mar 9, 2023 | 7.8 | 24 | NO | NO |
CVE-2022-30540HIGH The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code | Jun 2, 2022 | 7.8 | 24 | NO | NO |
Signals from CVEs in this vendor scope (37 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Hornerautomation.
Media articles that mention a CVE ID that affects a product developed by Hornerautomation — matched by CVE ID, not by vendor name.