Stack-based Buffer Overflow in CX-Programmer by Rockwell Automation

CVE-2022-43667

What is CVE-2022-43667?

A stack-based buffer overflow vulnerability in CX-Programmer versions up to and including 9.77 allows attackers to exploit this flaw by tricking users into opening specially crafted CXP files. This could potentially result in unauthorized access to sensitive information or enable code execution, putting systems at risk of compromise. Users are advised to exercise caution when handling unknown CXP files and to apply any available patches from Rockwell Automation.

References