Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-22424

Опубликовано: 06 мар. 2023
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. With the abnormal value given as the maximum number of columns for the PLC program, the process accesses the freed memory. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:jtekt:kostac_plc_programming_software:*:*:*:*:*:*:*:*
Версия до 1.6.9.0 (включая)

EPSS

Процентиль: 29%
0.00103
Низкий

7.8 High

CVSS3

Дефекты

CWE-416
CWE-416

Связанные уязвимости

CVSS3: 7.8
github
почти 3 года назад

Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. With the abnormal value given as the maximum number of columns for the PLC program, the process accesses the freed memory. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

EPSS

Процентиль: 29%
0.00103
Низкий

7.8 High

CVSS3

Дефекты

CWE-416
CWE-416