Description (CNA)
An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Horner Automation / Cscape | affected 10.0 |
| Horner Automation / XL7 PLC | affected 15.60 |
| Horner Automation / XL4 PLC | affected 16.32.0 |
CWE
CWE-521
References
- https://hornerautomation.com/cscape-software-free/cscape-software/
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-106-02
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-106-02.json
ADP enrichment
No English description supplied.
No references supplied.