CVE-2022-25230: Use After Free

Q: What is CVE-2022-25230?

CVE-2022-25230 is a use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite.

Q: What is the severity of CVE-2022-25230?

The severity of CVE-2022-25230 is high, with a severity value of 7.8.

Q: How does CVE-2022-25230 affect Omron CX-Programmer?

CVE-2022-25230 affects Omron CX-Programmer versions up to 9.77.

Q: How can CVE-2022-25230 be exploited?

CVE-2022-25230 can be exploited by having a user open a specially crafted CXP file, leading to information disclosure and/or arbitrary code execution.

Q: Is there a fix available for CVE-2022-25230?

To fix CVE-2022-25230, users should update to a version of CX-Programmer that is newer than v9.76.1.

Published Mar 7, 2022

Updated

Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25325.

Affected Software

1 affected component

Omron CX-Programmer<9.77

Event History

Mar 7, 2022

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2022-25230?

CVE-2022-25230 is a use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite.

What is the severity of CVE-2022-25230?

The severity of CVE-2022-25230 is high, with a severity value of 7.8.

How does CVE-2022-25230 affect Omron CX-Programmer?

CVE-2022-25230 affects Omron CX-Programmer versions up to 9.77.

How can CVE-2022-25230 be exploited?

CVE-2022-25230 can be exploited by having a user open a specially crafted CXP file, leading to information disclosure and/or arbitrary code execution.

Is there a fix available for CVE-2022-25230?