High ICSA-21-224-02 3 CVEs

Horner Automation Cscape

Published Aug 12, 2021 · Updated Aug 12, 2021

Vendor: Horner Automation Product: Cscape

Summary

Successful exploitation of these vulnerabilities may allow code execution in the context of the current process.

Vulnerabilities 3

Unscored —

CVE-2021-32975

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This …

Aug 25, 2021
Unscored —

CVE-2021-32995

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This …

Aug 25, 2021
Unscored —

CVE-2021-33015

Cscape (All Versions prior to 9.90 SP5) lacks proper validation of user-supplied data when parsing project files. This …

Aug 25, 2021

Revision history

2021-08-12 #1
ICSA-21-224-02 Horner Automation Cscape

References

ICS Advisory ICSA-21-224-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-224-02
Recommended Practices
https://us-cert.cisa.gov/ncas/tips/ST04-014
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B