CVE-2022-21219
First published: Mon Mar 07 2022(Updated: )
Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Omron CX-Programmer | <9.77 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-21219.
What is the severity of CVE-2022-21219?
The severity of CVE-2022-21219 is high with a CVSS score of 7.8.
Which software is affected by this vulnerability?
This vulnerability affects CX-Programmer v9.76.1 and earlier, which is a part of CX-One (v4.60) suite.
What can an attacker do with this vulnerability?
An attacker can cause information disclosure and/or arbitrary code execution by having a user open a specially crafted CXP file.
Is there a fix available for CVE-2022-21219?
It is recommended to update to CX-Programmer v9.77 or later to fix CVE-2022-21219.
- collector/nvd-index
- agent/references
- agent/event
- agent/type
- agent/weakness
- agent/severity
- agent/description
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/omron
- canonical/omron cx-programmer