CVE-2025-4098

Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Cscape.

Score

CVSS 4.0 8.4 High

Status

Deferred - ics-cert@hq.dhs.gov

Published

2025-05-08

Last modified

2025-05-10

Weaknesses

CWE-125

Affected products

• Cscape (Horner Automation)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-01