ICS Advisory: Horner Automation Cscape

Summary

The report provides information on a vulnerability in Horner Automation's Cscape products, specifically versions 9.90 SP10 and prior. The vulnerability is a stack-based buffer overflow (CVE-2023-7206) that can allow an attacker to execute arbitrary code on affected installations of Cscape. The vulnerability has a CVSS v3 base score of 7.8 and is classified as having an attack complexity of low. The Technical Details section provides information on the affected products, vulnerability overview, and background. The Mitigations section recommends applying the latest version of the software (v9.90 SP11) and provides defensive measures to minimize the risk of exploitation, including minimizing network exposure and implementing Virtual Private Networks (VPNs). The report also provides additional recommendations for protective measures against social engineering attacks and encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.