by Kastro
Paper/Archive/CVE-2026-6284

CVE-2026-6284

Horner Automation Cscape — Horner Automation Cscape and XL4, XL7 PLC Weak password requirements

EPSS 0.4%CVSS 9.3
critical.is priorityof 100
36
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 39.1.391 × 207.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An attacker with network access to the PLC is able to brute force discover passwords to gain unauthorized access to systems and services. The limited password complexity and no password input limiters makes brute force password enumeration possible.

Affected

ProductAffectedFixed inSource
Cscape10.0–CNA
XL7 PLC15.60–CNA
XL4 PLC16.32.0–CNA

Scores by source

icscert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
icscert (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refhornerautomation.com/cscape-software-free/cscape-softwarerefcisa.gov/news-events/ics-advisories/icsa-26-106-02refgithub.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-106-02.json