Multiple vulnerabilities in OMRON CX-Programmer

🗓️ 28 Nov 2022 06:40:37Reported by Japan Vulnerability NotesType

Multiple vulnerabilities in OMRON CX-Programmer may disclose data or execute code via a CXP file.

Reporter	Title	Published	Views	Family All 67
BDU FSTEC	The vulnerability of Omron CX-Programmer software for programming logic controllers lies in the possibility of an operation exceeding the buffer boundaries in memory. This allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.	14 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Omron CX-Programmer software for programming logic controllers lies in the possibility of an operation exceeding the buffer boundaries in memory. This allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.	14 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Omron CX-Programmer software for programming logic controllers lies in the use of memory after it is freed. This allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.	14 Dec 202200:00	–	bdu_fstec
Circl	CVE-2022-43508	23 Apr 202515:04	–	circl
Circl	CVE-2023-22277	3 Aug 202316:40	–	circl
Circl	CVE-2023-22314	3 Aug 202316:40	–	circl
Circl	CVE-2023-22317	3 Aug 202316:40	–	circl
CNNVD	Omron CX-Programmer 缓冲区错误漏洞	25 Nov 202200:00	–	cnnvd
CNNVD	Omron CX-Programmer 缓冲区错误漏洞	25 Nov 202200:00	–	cnnvd
CNNVD	Omron CX-Programmer 资源管理错误漏洞	25 Nov 202200:00	–	cnnvd

Source	Link
jvn	www.jvn.jp/en/vu/JVNVU92877622/995504/index.html
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cisa	www.cisa.gov/uscert/ics/advisories/icsa-22-356-04
jvn	www.jvn.jp/en/vu/JVNVU92877622/index.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-43508

05 Apr 2024 09:15Current

7.7High risk

Vulners AI Score7.7

CVSS 37.8

CVSS 3.17.8

EPSS0.00268

SSVC