Skip to content
OpenAdvisories
High ICSA-24-345-05 2 CVEs

Horner Automation Cscape

Published Dec 10, 2024 · Updated Dec 10, 2024

Vendor: Horner Automation Product: Cscape

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.

Vulnerabilities 2

  • High 7.8
    CVE-2024-12212

    Horner Automation Cscape Out-of-bounds Read

    The vulnerability occurs in the parsing of CSP files. The issues result from the lack of proper validation of user-supplied data, which could allow reading past the end of allocated data structures, resulting in execution of arbitrary code.

    Horner Automation Cscape
  • High 7.8
    CVE-2024-9508

    Horner Automation Cscape Out-of-bounds Read

    Horner Automation Cscape contains a memory corruption vulnerability, which could allow an attacker to disclose information and execute arbitrary code.

    Horner Automation Cscape

Revision history

  1. #1

    Initial Publication

References