PT-2026-52534 · Horner Automation · Cscape

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-12897

NVD

CVSS v4.0

8.4

Alta

Vetor base

AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2026-12897

Produtos afetados

Cscape

Referências · 2

• https://cisa.gov/news-events/ics-advisories/icsa-26-176-03 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-12897 · Nota de Segurança