Kostac PLC Programming Software Vulnerable to Out-of-bounds Read and DoS Attacks

CVE-2024-47136

What is CVE-2024-47136?

An out-of-bounds read vulnerability has been identified in Kostac PLC Programming Software (formerly known as Koyo PLC Programming Software) versions 1.6.14.0 and earlier. This vulnerability occurs when a user opens a specially crafted KPP project file that has been saved using version 1.6.9.0 or earlier. The parsing errors associated with such project files can result in a denial-of-service condition, provide opportunities for arbitrary code execution, and enable data leaks that lead to information disclosure. Users of these versions should take immediate action to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References