Use After Free Vulnerability in CX-Programmer by Rockwell Automation

CVE-2023-22314

What is CVE-2023-22314?

A use after free vulnerability has been identified in CX-Programmer versions prior to 9.79. This vulnerability allows an attacker to exploit the software by having a user open a specially crafted CXP file. If successfully triggered, it can lead to significant information disclosure and may facilitate arbitrary code execution on the affected system. The implications of this vulnerability make it essential for users to upgrade to the latest version to mitigate potential risks.

References