Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-22421

Опубликовано: 06 мар. 2023
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. The insufficient buffer size for the PLC program instructions leads to out-of-bounds read. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:jtekt:kostac_plc_programming_software:*:*:*:*:*:*:*:*
Версия до 1.6.9.0 (включая)

EPSS

Процентиль: 26%
0.0009
Низкий

7.8 High

CVSS3

Дефекты

CWE-125
CWE-125

Связанные уязвимости

CVSS3: 7.8
github
почти 3 года назад

Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. The insufficient buffer size for the PLC program instructions leads to out-of-bounds read. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

EPSS

Процентиль: 26%
0.0009
Низкий

7.8 High

CVSS3

Дефекты

CWE-125
CWE-125