Lucene search
HistoryDec 07, 2022 - 4:15 a.m.
CVE-2022-43509
cx-programmer
out-of-bounds write
information disclosure
arbitrary code execution
cxp file
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.7%
Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
Affected configurations
Node
omroncx-programmerRange≤9.77
Related
prion
prion
Cross site scripting
2022-12-07 04:15:00
cve
cve
CVE-2022-43509
2022-12-07 04:15:10
cvelist
cvelist
CVE-2022-43509
2022-12-07 00:00:00
ics
ics
Omron CX-Programmer
2022-12-22 12:00:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
53.7%
Related for NVD:CVE-2022-43509