CVE-2023-41374

🗓️ 20 Sep 2023 08:49:30Reported by jpcertType

CVE-2023-41374 Double free issue in Kostac PLC Programming Software v1.6.11.0 & earlier allows arbitrary code execution via specially crafted project file

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-41374	20 Sep 202312:30	–	circl
CNNVD	JTEKT Kostac PLC Programming Software Resource Management Error Vulnerability	12 Sep 202300:00	–	cnnvd
Cvelist	CVE-2023-41374	20 Sep 202308:49	–	cvelist
EUVD	EUVD-2023-45876	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software	13 Sep 202306:02	–	jvn
NVD	CVE-2023-41374	20 Sep 202309:15	–	nvd
Prion	Double free	20 Sep 202309:15	–	prion
RedhatCVE	CVE-2023-41374	23 May 202504:36	–	redhatcve
Vulnrichment	CVE-2023-41374	20 Sep 202308:49	–	vulnrichment

NVD

Vulners

Node

jtekt kostac_plcRange<1.6.10.0

jtekt kostac_plcMatch1.6.11.0

[
  {
    "vendor": "JTEKT ELECTRONICS CORPORATION",
    "product": "Kostac PLC Programming Software",
    "versions": [
      {
        "version": "Version 1.6.11.0 and earlier",
        "status": "affected"
      }
    ]
  }
]

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU95282683/index.html
electronics	www.electronics.jtekt.co.jp/en/topics/202309125391/

21 Nov 2024 08:21Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.8

EPSS0.00079

SSVC

CWE-415