CVE-2026-12897 — Out-of-bounds read in Horner Automation Cscape

CVE-2026-12897

Out-of-bounds read in Horner Automation Cscape PUBLISHED

Description (CNA)

Horner Automation Cscape versions prior to 10.2 SP3 are vulnerable to an Out-of-Bounds Read vulnerability through parsing CSP files. Successful exploitation of this vulnerability could allow an attacker to disclose information and execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Horner Automation / Cscape	affected 0 before 10.2 SP3

CWE

CWE-125

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-176-03

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.