Horner Automation Cscape

An attacker with local access to a machine running Cscape could execute arbitrary code with the privileges of the user running the application, potentially allowing unauthorized changes to industrial control logic or parameter settings.

Organizations operating industrial control systems programmed or maintained with Horner Automation Cscape, including water treatment facilities, manufacturing plants, and power distribution systems. Engineering and control personnel who use Cscape workstations to develop, deploy, or troubleshoot PLC logic are the primary risk.

An attacker must first gain local access to a computer where Cscape is installed—for example, through physical access, a USB drive, or a compromised network share. Once local, the attacker can exploit a memory corruption or bounds-checking flaw to run arbitrary code on that machine. If the Cscape workstation is used to program or monitor PLCs or other control devices, the attacker could alter program logic or parameters.