CVE-2022-25325: Use After Free
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25230.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2022-25325.
What is the severity level of CVE-2022-25325?
The severity level of CVE-2022-25325 is high with a CVSS score of 7.8.
What is the affected software?
The affected software is CX-Programmer, specifically versions up to and excluding 9.77, which is part of the CX-One suite v4.60.
What can an attacker do with this vulnerability?
An attacker can cause information disclosure and/or arbitrary code execution by tricking a user to open a specially crafted CXP file.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at [this link](https://jvn.jp/en/vu/JVNVU90121984/index.html).