jvn.jp
https://jvn.jp/en/vu/JVNVU98274902 CVE-2024-31412
HIGH
Record summary
CVE-2024-31412 has a selected CVSS score of 7.8 (high).
Description
Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially crafted project file may lead to information disclosure and/or the product being crashed.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 25, 2024 · Source: CVE List
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
CX-ProgrammerBrowse OMRON Corporation / CX-Programmer | CVE List | Included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower | affected |
cx-programmerBrowse omron / cx-programmerDefault status: unknown | CVE List | Through 9.81 | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-31412 fa.omron.co.jp
https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-003_en.pdf