CVE-2022-2641: Hornerautomation RCC972 Firmware

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Horner Automation’s RCC 972 with firmware version 15.40 has a static encryption key on the device. This could allow an attacker to perform unauthorized changes to the device, remotely execute arbitrary code, or cause a denial-of-service condition.

Affected products

• Hornerautomation RCC972 Firmware: version 15.40 only

Published 2022-12-02. Last modified 2026-06-17.