CVE-2024-31413

2024-05-0112:54:15

jpcert

github.com

pointer buffer vulnerability

cx-one

sysmac studio

arbitrary code execution

AI Score

7.8

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior) and Sysmac Studio SYSMAC-SE2[][][] (The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior). Opening a specially crafted project file may lead to arbitrary code execution.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:omrom:cx-designer:*:*:*:*:*:*:*:*"
    ],
    "vendor": "omrom",
    "product": "cx-designer",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ],
    "defaultStatus": "unknown"
  }
]