CVE-2022-2642

7.5 highEPSS 0.7%

High (7.5) in hornerautomation rcc972 firmware. EPSS 0.7% chance of exploitation in the next 30 days.

Horner Automation’s RCC 972 firmware version 15.40 contains global variables. This could allow an attacker to read out sensitive values and variable keys from the device.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-1108
Published: 2022-12-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hornerautomation:rcc972_firmware

References

https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02
https://www.cisa.gov/uscert/ics/advisories/icsa-22-335-02

Check your stack JSON