Horner Automation Cscape

An attacker with local access to a machine running Cscape or EnvisionRV could execute arbitrary code to modify control logic, alter process parameters, or crash the engineering workstation, disrupting system development and monitoring.

Organizations using Horner Automation Cscape or EnvisionRV for automation programming and monitoring. This affects engineering workstations and development environments in manufacturing, water/wastewater, and electric utility control systems.

An attacker must have local access to a machine running vulnerable Cscape or EnvisionRV software. Exploitation likely involves opening a malicious file or project that triggers a buffer overflow in the application, allowing code execution with the privileges of the user running the software.