Lucene search
K

222 matches found

BDU FSTEC
BDU FSTEC
added 2022/10/06 12:0 a.m.4 views

The vulnerability of the executable file CX-P.exe of the Omron CX-Programmer software for programming logic controllers allows a hacker to execute arbitrary code.

The vulnerability of the CX-P.exe executable file of Omron’s logic controller programming software allows for writing beyond the buffer boundaries in memory. Exploiting this vulnerability can enable a hacker to execute arbitrary code...

7.8CVSS7.9AI score0.00564EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2022/10/05 12:0 a.m.3 views

Omron CX-Programmer 缓冲区错误漏洞

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron Japan. A buffer error vulnerability exists in Omron CX-Programmer version 9.78 and earlier, which stems from vulnerability to out-of-bounds writes, which could allow an attacker to execute arbitrary code...

9.8CVSS8.9AI score0.00564EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/10/05 12:0 a.m.3 views

Omron CX-Programmer 缓冲区错误漏洞

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron Japan. A buffer error vulnerability exists in Omron CX-Programmer version 9.78 and earlier, which stems from vulnerability to out-of-bounds writes, which could allow an attacker to execute arbitrary code...

9.8CVSS8.9AI score0.00564EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/10/05 12:0 a.m.2 views

Omron CX-Programmer 缓冲区错误漏洞

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron Japan. A buffer error vulnerability exists in Omron CX-Programmer version 9.78 and prior versions, which can be exploited by an attacker to achieve arbitrary code execution via an out-of-bounds write...

9.8CVSS9.1AI score0.00564EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/10/04 12:0 a.m.3 views

PT-2022-4954 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: Omron CX-Programmer versions 9.78 and prior Description: The issue is related to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. This is due to a buffer overflow vulnerability in the CX-P.exe executable file,...

9.8CVSS9.6AI score0.00564EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/10/04 12:0 a.m.3 views

PT-2022-4955 · Omron · Omron Cx-Programmer

Name of the Vulnerable Software and Affected Versions: OMRON CX-Programmer versions 9.78 and prior Description: The issue is related to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. This is due to a buffer overflow vulnerability in the CX-P.exe executable file of...

9.8CVSS9.6AI score0.00564EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/10/04 12:0 a.m.2 views

PT-2022-4956 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: OMRON CX-Programmer versions 9.78 and prior Description: The issue is related to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. This vulnerability is associated with the possibility of writing beyond the buffer...

9.8CVSS9.4AI score0.00564EPSS
Exploits0References6
ICS
ICS
added 2022/10/04 12:0 a.m.56 views

OMRON CX-Programmer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Omron Equipment : CX-Programmer Vulnerabilities : Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device or may allow arbitrary code execution. 3. TECHNICAL DETAILS...

9.8CVSS9.4AI score0.00564EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2022/09/12 7:24 p.m.4 views

CVE-2022-2979 Omron CX-Programmer

Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution...

7.8CVSS7.8AI score0.00227EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/09/12 7:24 p.m.27 views

CVE-2022-2979 Omron CX-Programmer

Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution...

7.8CVSS8AI score0.00227EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/09/12 12:0 a.m.20 views

Omron CX-Programmer 资源管理错误漏洞

Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron Japan. A security vulnerability exists in Omron CX-Programmer versions prior to v9.78, which stems from the fact that opening a specially crafted file may cause the affected product to fail to free its memo...

7.8CVSS7.7AI score0.00227EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.2 views

The vulnerability of the development environment provided by CX-Programmer, which is part of the CX-One software suite designed for programming and configuring Omron PLCs, allows a perpetrator to execute arbitrary code.

The vulnerability of the development environment provided by CX-Programmer, which is part of the CX-One software suite designed for programming and configuring Omron PLCs, relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00227EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/30 12:0 a.m.7 views

PT-2022-4526 · Omron · Cx-One

Name of the Vulnerable Software and Affected Versions: CX-One affected versions not specified Description: The issue is related to a use-after-free vulnerability in the CX-Programmer development environment, part of the CX-One software suite used for programming and configuring Omron PLCs. This...

7.8CVSS7.7AI score0.00227EPSS
Exploits0References4
ICS
ICS
added 2022/08/30 12:0 a.m.46 views

Omron CX-Programmer

1. EXECUTIVE SUMMARY CVSS v3 7,8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-Programmer Vulnerability: Use After Free 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS...

7.8CVSS8.2AI score0.00227EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2022/08/23 12:0 a.m.25 views

Omron CX-One CX-Programmer CXP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

7.8CVSS4.2AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.4 views

The vulnerability of the development environment “CX-Programmer,” which is part of the software suite “CX-One” designed for programming and configuring Omron PLCs, lies in the ability to write data beyond the buffer boundaries in memory. This allows attackers to disclose sensitive information or execute arbitrary code.

The vulnerability of the development environment “CX-Programmer,” which is part of the software suite “CX-One” designed for programming and configuring Omron PLCs, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive...

7.8CVSS7.5AI score0.01421EPSS
Exploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:47 p.m.3 views

CVE-2022-25325

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One v4.60 suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25230...

7.8CVSS7.6AI score0.01012EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/03/10 5:47 p.m.1 views

CVE-2022-25325

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One v4.60 suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25230...

7.8CVSS7.6AI score0.01012EPSS
Exploits0References1
NVD
NVD
added 2022/03/10 5:47 p.m.8 views

CVE-2022-25325

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One v4.60 suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25230...

7.8CVSS0.01012EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:47 p.m.1 views

CVE-2022-25234

Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One v4.60 suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-2112...

7.8CVSS7.6AI score0.01421EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder