Horner Automation Cscape and PLC Vulnerability Allowing Unauthorized Access via Brute Force Password Attack

A vulnerability exists in Horner Automation Cscape software versions 10.0 and PLCs XL4 (version 16.32.0) and XL7 (version 15.60) that allows an attacker with network access to the PLC to brute force passwords. The vulnerability arises from weak password requirements, including limited complexity and no input limiters, enabling unauthorized access to systems and services.

Impact

Exploitation of this vulnerability could lead to unauthorized access to systems and services.

Remediation

Horner Automation recommends users update to Cscape version 10.2 SP2 or later. The latest firmware for both XL4 and XL7 PLCs is also available. For more information, see Horner Automation's release notes.