CVE-2023-7206
High
Description
In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHornerautomation Cscape
PublishedJan 15, 2024
First seenJan 15, 2024
Weakness typeCWE-121CWE-121
How to fix
Update
- hornerautomation cscape9.90 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hornerautomation cscape | v < 9.90, 9.90 | 9.90 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.