CVE-2024-31412

May 1, 2024, 7:50 p.m.

None
No Score

Description

Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening a specially crafted project file may lead to information disclosure and/or the product being crashed.

Product(s) Impacted

Product Versions
CX-One CXONE-AL[][]D-V4
  • Ver. 9.81 or lower
CX-One
  • CXONE-AL[][]D-V4 Ver. 9.81 or lower

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://jvn.jp/en/vu/JVNVU98274902/
https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-003_en.pdf

Tags

2024-05-01
vultures@jpcert.or.jp
CVE-2024-31412

Timeline

Published: May 1, 2024, 1:15 p.m.
Last Modified: May 1, 2024, 7:50 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

vultures@jpcert.or.jp

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.