Vendor/product archive

hornerautomation / rcc972 CVEs

Beta · best-effort

3 CVEs tagged to hornerautomation / rcc972 — 1 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to hornerautomation vendor archive

CVE-2022-2642

Published Dec 2, 2022

Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2022-2641

Published Dec 2, 2022

Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remo…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-2640

Published Dec 2, 2022

The Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with weak XOR encryption vulnerable to reverse engineering. This could allow an attacker…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1