View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to systems and services.

The following versions of Horner Automation Cscape and XL4, XL7 PLC are affected:

Cscape v10.0

XL7 PLC v15.60

XL4 PLC v16.32.0

CVSS Vendor Equipment Vulnerabilities

v3 9.1 Horner Automation Horner Automation Cscape and XL4, XL7 PLC Weak Password Requirements

Background

Critical Infrastructure Sectors: Critical Manufacturing

Countries/Areas Deployed: Worldwide

Company Headquarters Location: United States

Vulnerabilities

Expand All +

CVE-2026-6284

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services.…