cscape vulnerabilities and fixes

Recent CVEs affecting cscape, with upgrade or downgrade steps. 11 tracked.

cscape has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-01-15. Highest priority: CVE-2023-32545 (score 31/100).

• CVE-2023-7206 HIGH 7.8 UPGRADE In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerabil
• CVE-2023-32545 HIGH 7.8 DOWNGRADE DOWNGRADE The affected application lacks proper validation of user-supplied data when parsing project files
• CVE-2023-32539 HIGH 7.8 DOWNGRADE DOWNGRADE Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI)
• CVE-2023-32289 HIGH 7.8 DOWNGRADE DOWNGRADE The affected application lacks proper validation of user-supplied data when parsing project files (
• CVE-2023-32281 HIGH 7.8 DOWNGRADE DOWNGRADE The affected application lacks proper validation of user-supplied data when parsing project files (e.
• CVE-2023-32203 HIGH 7.8 DOWNGRADE DOWNGRADE Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI)
• CVE-2023-31278 HIGH 7.8 DOWNGRADE DOWNGRADE Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI)
• CVE-2023-31244 HIGH 7.8 DOWNGRADE DOWNGRADE The affected product does not properly validate user-supplied data
• CVE-2023-29503 HIGH 7.8 DOWNGRADE DOWNGRADE The affected application lacks proper validation of user-supplied data when parsing project files (e.g.
• CVE-2023-28653 HIGH 7.8 DOWNGRADE DOWNGRADE The affected application lacks proper validation of user-supplied data when parsing project f
• CVE-2023-27916 HIGH 7.8 DOWNGRADE DOWNGRADE The affected application lacks proper validation of user-supplied data when parsing font files

FAQ

How do I fix cscape vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cscape being exploited right now?

None of the tracked cscape CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cscape CVE should I patch first?

CVE-2023-32545 currently ranks highest (31/100): The affected application lacks proper validation of user-supplied data when parsing project files.

RSS feed for cscape · ← Back to latest CVEs