Kostac PLC Programming Software Vulnerable to Out-of-Bounds Write, DoS, Arbitrary Code Execution, and Information Disclosure
CVE-2024-47134
7.8HIGH
Key Information:
- Vendor
- CVE Published:
- 3 October 2024
What is CVE-2024-47134?
An out-of-bounds write vulnerability exists in the Kostac PLC Programming Software. This affects Version 1.6.14.0 and earlier, whereby a specially crafted project file saved with Version 1.6.9.0 or earlier can trigger serious security issues. Users opening these files may experience a denial-of-service condition, the potential for arbitrary code execution, and information disclosure due to vulnerabilities in the file-parsing mechanism for KPP project files.
Affected Version(s)
Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) 1.6.14.0 and earlier