CVE-2022-21219: High severity omron cx-programmer vulnerability
Published Mar 7, 2022
·Updated
Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
Affected Software
1 affected component
Omron CX-Programmer<9.77
Event History
Mar 7, 2022
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-21219.
2
What is the severity of CVE-2022-21219?
The severity of CVE-2022-21219 is high with a CVSS score of 7.8.
3
Which software is affected by this vulnerability?
This vulnerability affects CX-Programmer v9.76.1 and earlier, which is a part of CX-One (v4.60) suite.
4
What can an attacker do with this vulnerability?
An attacker can cause information disclosure and/or arbitrary code execution by having a user open a specially crafted CXP file.
5
Is there a fix available for CVE-2022-21219?
It is recommended to update to CX-Programmer v9.77 or later to fix CVE-2022-21219.