Lucene search
+L

253 matches found

Zero Day Initiative
Zero Day Initiative
•added 2023/03/07 12:00 a.m.•45 views

Omron CX-One CXP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

7.8CVSS5.2AI score0.00715EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2023/03/07 12:00 a.m.•42 views

Omron CX-One CXP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

7.8CVSS4.2AI score0.00715EPSS
SaveExploits0References1
ICS
ICS
•added 2022/12/22 12:00 a.m.•52 views

Omron CX-Programmer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-Programmer Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow arbitrary code execution or loss of sensitive information if a user opens a...

7.8CVSS8AI score0.00252EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/12/14 12:00 a.m.•16 views

The vulnerability of Omron CX-Programmer software for programming logic controllers lies in the use of memory after it is freed. This allows a malicious actor to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of Omron CX-Programmer software for programming logic controllers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or execute arbitrary code using a specially created CXP...

7.8CVSS7.6AI score0.00259EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/12/07 4:15 a.m.•15 views

CVE-2022-43667

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS6.5AI score0.00284EPSS
SaveExploits0References2
OSV
OSV
•added 2022/12/07 4:15 a.m.•15 views

CVE-2022-43508

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS6.3AI score0.00259EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/07 4:15 a.m.•36 views

CVE-2022-43667

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS0.00284EPSS
SaveExploits0References2
OSV
OSV
•added 2022/12/07 4:15 a.m.•19 views

CVE-2022-43509

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS6.3AI score0.00252EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/07 4:15 a.m.•40 views

CVE-2022-43509

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS0.00252EPSS
SaveExploits0References2
NVD
NVD
•added 2022/12/07 4:15 a.m.•28 views

CVE-2022-43508

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS0.00259EPSS
SaveExploits0References2
Prion
Prion
•added 2022/12/07 4:15 a.m.•26 views

Cross site scripting

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

4.4CVSS7.6AI score0.00252EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/12/07 4:15 a.m.•46 views

Design/Logic Flaw

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

4.4CVSS7.6AI score0.00259EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/12/07 4:15 a.m.•29 views

Stack overflow

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

4.4CVSS7.7AI score0.00284EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/12/07 12:00 a.m.•95 views

CVE-2022-43509

CX-Programmer up to v9.77 contains an out-of-bounds write (CWE-787) vulnerability that can lead to information disclosure or arbitrary code execution when a user opens a specially crafted CXP file. CVE-2022-43509 is assigned; CVSS v3 base score 7.8 (L: Local, L: Low, N: None, UI: Required, C/I/A:...

7.8CVSS7.5AI score0.00252EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/12/07 12:00 a.m.•79 views

CVE-2022-43667

CX-Programmer vulnerability CVE-2022-43667 is a stack-based buffer overflow in Omron CX-Programmer (versions 9.77 and earlier). The issue can lead to information disclosure and/or arbitrary code execution when a user opens a specially crafted CXP file. Documented impact is confined to local attac...

7.8CVSS7.7AI score0.00284EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/12/07 12:00 a.m.•46 views

CVE-2022-43667

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

8AI score0.00284EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/07 12:00 a.m.•1 views

CVE-2022-43508: Use After Free

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS7.8AI score0.00259EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/07 12:00 a.m.•1 views

CVE-2022-43509: Out-of-bounds Write

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8CVSS7.7AI score0.00252EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/07 12:00 a.m.•46 views

CVE-2022-43509

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.8AI score0.00252EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/12/07 12:00 a.m.•6 views

CVE-2022-43508

Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file...

7.4AI score0.00259EPSS
SaveExploits0References2
Rows per page
Query Builder