Kostac PLC Programming Software Vulnerable to Out-of-bounds Read and DoS Attacks

CVE-2024-47136

What is CVE-2024-47136?

An out-of-bounds read vulnerability has been identified in Kostac PLC Programming Software (formerly known as Koyo PLC Programming Software) versions 1.6.14.0 and earlier. This vulnerability occurs when a user opens a specially crafted KPP project file that has been saved using version 1.6.9.0 or earlier. The parsing errors associated with such project files can result in a denial-of-service condition, provide opportunities for arbitrary code execution, and enable data leaks that lead to information disclosure. Users of these versions should take immediate action to mitigate potential risks.

References