CVE-2022-40984

CRITICAL

Yokogawa WTViewerE 761941 1.31-1.61 and WTViewerEfree 1.01-1.52 - Stack-based Buffer Overflow via Long File Name

Title source: llm

Description

Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker to cause the product to crash by processing a long file name.

References (2)

Core 2

Core References

Vendor Advisory

https://cdn.aff.yokogawa.com/8/756/details/Vulnerability_in_YOKOGAWA_application_software_WTViewerE_r0_e.pdf

Third Party Advisory

https://jvn.jp/en/vu/JVNVU99955870/index.html

Scores

CVSS v3 9.8

EPSS 0.0078

EPSS Percentile 51.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-787

Status published

Products (2)

yokogawa/wtviewere_761941 1.31 - 1.62

yokogawa/wtviewerefree 1.01 - 1.53

Published Oct 24, 2022

Tracked Since Feb 18, 2026