CVE-2025-4098 - CVE House
Back to Database
Status published High CVE-2025-4098

Out-of-bounds Read in Horner Automation Cscape

Vulnerability Description

Horner Automation Cscape version 10.0 (10.0.415.2) SP1 is vulnerable to an out-of-bounds read vulnerability that could allow an attacker to disclose information and execute arbitrary code on affected installations of Cscape.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-4098

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Michael Heinzl

Affected Vendor

Horner Automation

View all reports →

Affected Software

Cscape
Vulnerable Versions:
10.0 (10.0.415.2) SP1

Timeline

Official Publish: May 8th, 2025
Last Modified: May 10th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)