High · 7.8 CVE-2023-22366 EUVD-2023-26529GHSA-8cxj-vc9j-xq64

CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted projec…

Published Jan 17, 2023 · Updated Apr 3, 2025 · Assigned by jpcert

Vendor: Omron Product: CX-Motion-MCH Category: ICS / OT

Description

CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Affected products

Vendor	Product	Affected	Fixed
OMRON	CX-Motion-MCH	v2.32 and earlier	—

References

https://jvn.jp/en/vu/JVNVU91744508/index.html