High ICSA-23-096-03 3 CVEs

JTEKT ELECTRONICS Kostac PLC Programming Software

Published Apr 10, 2023 · Updated Apr 10, 2023

Vendor: JTEKT ELECTRONICS Product: Kostac PLC Programing Software

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disclose information or execute arbitrary code.

Vulnerabilities 3

High 7.8

CVE-2023-22421

Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software)…

JTEKT ELECTRONICS Kostac PLC Programming Software (Former name: Koyo PLC Programming Software)

Mar 5, 2023
High 7.8

CVE-2023-22424

Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Ver…

JTEKT ELECTRONICS Kostac PLC Programming Software (Former name: Koyo PLC Programming Software)

Mar 5, 2023
Unscored —

CVE-2023-22419

Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software)…

JTEKT ELECTRONICS Kostac PLC Programming Software (Former name: Koyo PLC Programming Software)

Mar 5, 2023

Revision history

2023-04-10 #1
CSAF Creation Date

References

ICS Advisory ICSA-23-096-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-096-03
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/ics/Recommended-Practices
Recommended Practices
https://cisa.gov/ics
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
Recommended Practices
https://www.cisa.gov/uscert/ncas/tips/ST04-014