Description
The vulnerability occurs in the parsing of CSP files. The issues result
from the lack of proper validation of user-supplied data, which could
allow reading past the end of allocated data structures, resulting in
execution of arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Horner Automation | Cscape | ≤ 10.0.363.1 | — |
Advisories 1
- ICSA-24-345-05 Horner Automation Cscape CISA ICS & IT advisories · Dec 10, 2024