Skip to content
OpenAdvisories
High ICSA-21-112-01 2 CVEs

Horner Automation Cscape

Published Apr 22, 2021 · Updated Apr 22, 2021

Vendor: Horner Automation Product: Cscape

Summary

Successful exploitation of these vulnerabilities may allow code execution in the context of the current process or locally escalate privileges.

Vulnerabilities 2

  • Unscored —
    CVE-2021-22678

    Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This …

  • Unscored —
    CVE-2021-22682

    Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permi…

Revision history

  1. #1

    ICSA-21-112-01 Horner Automation Cscape

References