Lucene search
HistoryDec 07, 2022 - 4:15 a.m.
CVE-2022-43508
cx-programmer
vulnerability
use-after free
cve-2022-43508
information disclosure
arbitrary code execution
cxp file
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
42.4%
Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
Affected configurations
Node
omroncx-programmerRange≤9.77
| Vendor | Product | Version | CPE |
|---|---|---|---|
| omron | cx-programmer | * | cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-43508
2022-12-07 00:00:00
cve
cve
CVE-2022-43508
2022-12-07 04:15:10
prion
prion
Design/Logic Flaw
2022-12-07 04:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
42.4%
Related for NVD:CVE-2022-43508