Lucene search
HistoryAug 03, 2023 - 1:15 p.m.
CVE-2023-22314
cx-programmer
use after free
information disclosure
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.8%
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22317.
Affected configurations
Node
omroncx-programmerRange≤9.79
| Vendor | Product | Version | CPE |
|---|---|---|---|
| omron | cx-programmer | * | cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:* |
References
Related
cvelist
cvelist
cve
cve
nvd
nvd
CVE-2023-22277
2023-08-03 15:15:17
CVE-2023-22317
2023-08-03 13:15:09
prion
prion
Design/Logic Flaw
2023-08-03 13:15:00
Design/Logic Flaw
2023-08-03 15:15:00
Design/Logic Flaw
2023-08-03 13:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
32.8%
Related for NVD:CVE-2023-22314