CVE-2019-13541
Last modified
CVE-2019-13541 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access information and remotely execute arbitrary code.. EPSS estimates a 1.94% chance of exploitation in the next 30 days.
Description
In Horner Automation Cscape 9.90 and prior, an improper input validation vulnerability has been identified that may be exploited by processing files lacking user input validation. This may allow an attacker to access information and remotely execute arbitrary code.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hornerautomation | Cscape | <= 9.90 |
References
- https://www.us-cert.gov/ics/advisories/icsa-19-290-02Mitigation, Third Party Advisory, US Government Resource
- https://www.zerodayinitiative.com/advisories/ZDI-19-902/Third Party Advisory, VDB Entry
- https://www.us-cert.gov/ics/advisories/icsa-19-290-02Mitigation, Third Party Advisory, US Government Resource
- https://www.zerodayinitiative.com/advisories/ZDI-19-902/Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-13541?
How severe is CVE-2019-13541?
How do I fix CVE-2019-13541?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-13536Delta Electronics TPEditor, Versions 1.94 and prior. Multipl…7.8
- CVE-2019-13537The IEC870IP driver for AVEVA’s Vijeo Citect and Citect SCAD…7.5
- CVE-2019-135383S-Smart Software Solutions GmbH CODESYS V3 Library Manager,…8.6
- CVE-2019-13539Medtronic Valleylab Exchange Client version 3.4 and below, V…7.8
- CVE-2019-1354A remote code execution vulnerability exists when Git for Vi…8.8
- CVE-2019-13540Delta Electronics TPEditor, Versions 1.94 and prior. Multipl…7.8
- CVE-2019-135423S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, a…6.5
- CVE-2019-13543Medtronic Valleylab Exchange Client version 3.4 and below, V…7.5
- CVE-2019-13544Delta Electronics TPEditor, Versions 1.94 and prior. Multipl…7.8
- CVE-2019-13545In Horner Automation Cscape 9.90 and prior, improper validat…7.8
- CVE-2019-13546In IntelliSpace Perinatal, Versions K and prior, a vulnerabi…6.8
- CVE-2019-13547Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is…9.8
Are you affected by CVE-2019-13541?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST