Kostac PLC Programming Software Vulnerable to Out-of-Bounds Write, DoS, Arbitrary Code Execution, and Information Disclosure
CVE-2024-47134
Key Information:
- Vendor
- CVE Published:
- 3 October 2024
What is CVE-2024-47134?
An out-of-bounds write vulnerability exists in the Kostac PLC Programming Software. This affects Version 1.6.14.0 and earlier, whereby a specially crafted project file saved with Version 1.6.9.0 or earlier can trigger serious security issues. Users opening these files may experience a denial-of-service condition, the potential for arbitrary code execution, and information disclosure due to vulnerabilities in the file-parsing mechanism for KPP project files.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) 1.6.14.0 and earlier
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved
