Out-of-bounds Write Vulnerability in CX-Programmer by Mitsubishi
CVE-2022-43509

7.8HIGH

Key Information:

Vendor

Omron Corporation

Status
Cx-programmer
Vendor
CVE Published:
7 December 2022

What is CVE-2022-43509?

An out-of-bounds write vulnerability exists in CX-Programmer versions 9.77 and earlier, allowing attackers to manipulate specially crafted CXP files. This may result in unauthorized access to sensitive information or the execution of arbitrary code, potentially compromising the integrity of systems reliant on this software.

Affected Version(s)

CX-Programmer v.9.77 and earlier

References

https://jvn.jp/en/vu/JVNVU92877622/index.html
https://jvn.jp/vu/JVNVU92877622/index.html

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.