High · 7.8 CVE-2022-43667 EUVD-2022-46662GHSA-3259-r88x-8729

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbit…

Published Dec 7, 2022 · Updated Apr 23, 2025 · Assigned by jpcert

Vendor: Omron Product: CX-Programmer Category: ICS / OT

Description

Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.

Affected products

Vendor	Product	Affected	Fixed
OMRON	CX-Programmer	v.9.77 and earlier	—

References

https://jvn.jp/en/vu/JVNVU92877622/index.html
https://jvn.jp/vu/JVNVU92877622/index.html