Stack-based Buffer Overflow in CX-Programmer by Rockwell Automation
CVE-2022-43667

7.8HIGH

Key Information:

Vendor

Omron Corporation

Status
Cx-programmer
Vendor
CVE Published:
7 December 2022

What is CVE-2022-43667?

A stack-based buffer overflow vulnerability in CX-Programmer versions up to and including 9.77 allows attackers to exploit this flaw by tricking users into opening specially crafted CXP files. This could potentially result in unauthorized access to sensitive information or enable code execution, putting systems at risk of compromise. Users are advised to exercise caution when handling unknown CXP files and to apply any available patches from Rockwell Automation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

CX-Programmer v.9.77 and earlier

References

https://jvn.jp/en/vu/JVNVU92877622/index.html
https://jvn.jp/vu/JVNVU92877622/index.html

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.