Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3599-wxpf-rm35

Опубликовано: 01 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior) and Sysmac Studio SYSMAC-SE2[][][] (The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior). Opening a specially crafted project file may lead to arbitrary code execution.

Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior) and Sysmac Studio SYSMAC-SE2[][][] (The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior). Opening a specially crafted project file may lead to arbitrary code execution.

EPSS

Процентиль: 25%
0.00086
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-761

Связанные уязвимости

CVSS3: 5.9
nvd
почти 2 года назад

Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior) and Sysmac Studio SYSMAC-SE2[][][] (The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior). Opening a specially crafted project file may lead to arbitrary code execution.

CVSS3: 7.8
fstec
почти 2 года назад

Уязвимость среды разработки программного обеспечения для автоматизации и управления производственными процессами Omron Sysmac Studio и программного обеспечения CX-One, связанная с использованием функции Free для указателя не в начале буфера, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 25%
0.00086
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-761