Description
In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Horner Automation | Cscape | ≤ 9.90 SP10 | — |
Advisories 1
- ICSA-24-011-04 Horner Automation Cscape CISA ICS & IT advisories · Jan 11, 2024