Horner Automation Cscape

An attacker with local access to a Cscape engineering workstation could read sensitive data, inject malicious code into control logic, and execute arbitrary commands on the device. This could allow manipulation of process control parameters or shutdown of industrial operations.

Organizations running Horner Automation Cscape engineering software are affected. This impacts engineers and operators who use Cscape to design, configure, and maintain control logic for Horner PLCs and industrial controllers used in manufacturing, water treatment, power distribution, and other critical infrastructure.

An attacker must have physical or local network access to a Cscape workstation and trick a user into opening a malicious file or interacting with a compromised input (e.g., via email attachment or crafted file transfer). Once the vulnerable code path is triggered, the attacker gains the ability to read memory and execute code with the privileges of the Cscape application.