CVE-2024-31413

A free of pointer not at start of buffer vulnerability (CWE-761) exists in Omron software used for manufacturing automation, specifically CX-One (versions 4.61.1 and earlier) and Sysmac Studio (versions 1.56 and earlier). The root cause stems from the improper use of the "Free" function on a poin...

CVE-2024-31412

The CX-Programmer software, included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower , is susceptible to an out-of-bounds read vulnerability (CWE-125). A malicious actor can exploit this by opening a specially crafted project file, which may result in information disclosure or cause the application...

CVE-2024-31412

Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-ALD-V4 Ver. 9.81 or lower. Opening a specially crafted project file may lead to information disclosure and/or the product being crashed...

CVE-2024-31412

Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-ALD-V4 Ver. 9.81 or lower. Opening a specially crafted project file may lead to information disclosure and/or the product being crashed...

CVE-2024-31413: Free of Pointer not at Start of Buffer

Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-ALD-V4 The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior and Sysmac Studio SYSMAC-SE2 The version which was installed with a DVD...

CVE-2024-31412: Out-of-bounds Read

Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-ALD-V4 Ver. 9.81 or lower. Opening a specially crafted project file may lead to information disclosure and/or the product being crashed...

Multiple vulnerabilities in OMRON Sysmac Studio/CX-One and CX-Programmer

Overview OMRON Sysmac Studio/CX-One and CX-Programmer contain multiple vulnerabilities listed below. Out-of-bounds read CWE-125 - CVE-2024-31412 Free of pointer not at start of buffer CWE-761 - CVE-2024-31413 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with t...

PT-2024-3704 · Omron · Cx-One +1

Name of the Vulnerable Software and Affected Versions: CX-One versions 4.61.1 and earlier Sysmac Studio versions 1.56 and earlier Description: The issue is related to the use of a function that frees a pointer not at the start of a buffer, which can be exploited to execute arbitrary code. This ca...

PT-2024-3702 · Omron · Cx-One

Name of the Vulnerable Software and Affected Versions: CX-One CXONE-ALD-V4 versions 9.81 and earlier Description: The issue is related to an out-of-bounds read vulnerability in CX-Programmer. This vulnerability can be exploited by opening a specially crafted project file, potentially leading to...

Omron Sysmac Studio 安全漏洞

Omron Sysmac Studio is a unique environment from Omron Japan that integrates logic, motion and drives, robotics, safety, visualization, sensing, and information technology into a single project, thereby reducing the learning curve and intraoperative software costs. A security vulnerability exists...

Omron Sysmac Studio 安全漏洞

Omron Sysmac Studio is a unique environment from Omron Japan that integrates logic, motion and drives, robotics, safety, visualization, sensing, and information technology into a single project, thereby reducing the learning curve and intraoperative software costs. A security vulnerability exists...

CVE-2024-0529

A vulnerability has been found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /apps/loginauth.php of the component HTTP POST Request Handler. The manipulation of the argument usernamelogin leads to sql injection...

CVE-2024-0524

A vulnerability was found in CXBSoft Url-shorting up to 1.3.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument url leads to sql injection. The exploit has been disclosed to the public and may be used...

PT-2024-15640 · Unknown · Cxbsoft Url-Shorting

Name of the Vulnerable Software and Affected Versions: CXBSoft Url-shorting versions up to 1.3.1 Description: A critical issue has been found in the processing of the file /admin/pages/update go.php of the component HTTP POST Request Handler. The manipulation of the version argument leads to SQL...

The vulnerability of the microprogrammed software of Aruba CX 6200F, 6300, 6400, 8320, 8325, and 8400 lies in the ability to cause a service failure by writing beyond the buffer boundaries.

The vulnerability of the microprogramming software of Aruba CX 6200F, 6300, 6400, 8320, 8325, and 8400 lies in the ability to write beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the microprogramming software for Aruba CX 6200F, 6300, 6400, 8320, 8325, and 8400 lies in the ability to perform write operations beyond the buffer boundaries, allowing an attacker to cause a service failure in the CDP process.

The vulnerability of the microprogrammed software of Aruba CX 6200F, 6300, 6400, 8320, 8325, and 8400 relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause a service failure in the CDP process...

Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Designer

Overview CX-Designer provided by OMRON Corporation contains an improper restriction of XML external entity reference XXE vulnerability CWE-611. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact If a user opens a specially crafted project fil...

CVE-2023-43624

CX-Designer Ver.3.740 and earlier included in CX-One CXONE-ALD-V4 contains an improper restriction of XML external entity reference XXE vulnerability. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Designer is installed m...

CVE-2023-43624

CX-Designer Ver.3.740 and earlier included in CX-One CXONE-ALD-V4 contains an improper restriction of XML external entity reference XXE vulnerability. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Designer is installed m...

Xxe

CX-Designer Ver.3.740 and earlier included in CX-One CXONE-ALD-V4 contains an improper restriction of XML external entity reference XXE vulnerability. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Designer is installed m...