462 matches found
CVE-2022-43509
CX-Programmer up to v9.77 contains an out-of-bounds write (CWE-787) vulnerability that can lead to information disclosure or arbitrary code execution when a user opens a specially crafted CXP file. CVE-2022-43509 is assigned; CVSS v3 base score 7.8 (L: Local, L: Low, N: None, UI: Required, C/I/A:...
CVE-2022-43667
CX-Programmer vulnerability CVE-2022-43667 is a stack-based buffer overflow in Omron CX-Programmer (versions 9.77 and earlier). The issue can lead to information disclosure and/or arbitrary code execution when a user opens a specially crafted CXP file. Documented impact is confined to local attac...
Multiple vulnerabilities in OMRON CX-Programmer
Overview CX-Programmer provided by Omron Corporation contains multiple vulnerabilities listed below. Use-after-free CWE-416 - CVE-2022-43508, CVE-2023-22277, CVE-2023-22317, CVE-2023-22314 Out-of-bounds Write CWE-787 - CVE-2022-43509 Stack-based Buffer Overflow CWE-121 - CVE-2022-43667 Michael...
PT-2022-5828 · Unknown · Cx-Programmer
Name of the Vulnerable Software and Affected Versions: CX-Programmer versions 9.77 and earlier Description: A use-after free issue exists, potentially leading to information disclosure and/or arbitrary code execution. This can occur when a user opens a specially crafted CXP file, allowing an...
Omron CX-Programmer buffer error vulnerability
Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron, Japan. A security vulnerability exists in Omron CX-Programmer version v.9.77 and prior versions, which stems from a stack-based buffer overflow issue...
Omron CX-Programmer Resource Management Error Vulnerability
Omron CX-Programmer is a PLC Programmable Logic Controller programming software from Omron, Japan. A security vulnerability exists in Omron CX-Programmer version v.9.77 and prior versions, which stems from a memory reuse after release issue...
PT-2022-5826 · Omron · Cx-Programmer
Name of the Vulnerable Software and Affected Versions: CX-Programmer versions 9.77 and earlier Description: The issue is related to an out-of-bounds write vulnerability that may lead to information disclosure and/or arbitrary code execution. This can be achieved by having a user open a specially...
PT-2022-5827 · Omron · Omron Cx-Programmer
Name of the Vulnerable Software and Affected Versions: Omron CX-Programmer versions 9.77 and earlier Description: The issue is related to a stack-based buffer overflow in memory, which can be exploited by having a user open a specially crafted CXP file. This may lead to information disclosure...
CVE-2022-27233
XML injection in the QuartusR Prime Programmer included in the IntelR Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access...
CVE-2022-27233
XML injection in the QuartusR Prime Programmer included in the IntelR Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access...
CVE-2022-27233
XML injection in the Intel Quartus Prime Programmer (Pro/Standard editions) is the root cause of CVE-2022-27233, potentially allowing an unauthenticated user to disclose information via network access. Affected: Quartus Prime Programmer Pro edition before 22.1 and Standard edition before 21.1 Pat...
CVE-2022-27233
XML injection in the QuartusR Prime Programmer included in the IntelR Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access...
CVE-2022-27233: XML Injection (aka Blind XPath Injection)
XML injection in the QuartusR Prime Programmer included in the IntelR Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access...
PT-2022-18317 · Intel · Quartus Prime Standard +1
Name of the Vulnerable Software and Affected Versions: IntelR Quartus Prime Pro and Standard edition software affected versions not specified Description: The issue concerns XML injection in the QuartusR Prime Programmer, which may allow an unauthenticated user to potentially enable information...
CVE-2022-3397
OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code...
CVE-2022-3398
OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code...
CVE-2022-3398
OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code...
CVE-2022-3397
OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code...