Skip to content
OpenAdvisories
Unscored CVE-2022-25230 EUVD-2022-29929GHSA-86jq-45rr-83q7

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause infor…

Published Mar 7, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Omron Product: CX-Programmer Category: ICS / OT

Description

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25325.

Affected products

VendorProductAffectedFixed
OMRON CX-Programmer CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite —

References