Omron CX-Programmer
view advisory published 2022-12-22
Successful exploitation of this vulnerability could allow arbitrary code execution or loss of sensitive information if a user opens a specially crafted CX-P file.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-43509US | high7.8 | — | ||
Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a sp… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationCX-Programmer
For more information, see the Omron release notes.
https://www.ia.omron.com/product/tool/26/cxone/e4_doc.html?_ga=2.122882383.558156545.1661312515-1562293325.1567412774#cx_programmer - FixedCX-Programmer
Omron released an update via “Auto Update Service” to fix the reported issues. Omron recommends updating to Omron CX-Programmer v9.79
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan