CVE-2025-0591: Out-of-bounds Read vulnerability in CX-Programmer

Published Feb 16, 2025

Updated

Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability.

Affected Software

1 affected component

Rockwell Automation CX-Programmer

Remediation

Information

Update your CX-Programmer to the countermeasure version to fix the vulnerability. For information on how to obtain and update the countermeasure version of the product, please contact our sales representative or distributor. You can update CX-One to the latest versions using the installed Omron Automation Software AutoUpdate tool.

Event History

Feb 16, 2025

CVE Published

via MITRE·11:58 PM

Data Sourced

via MITRE·11:58 PM

RemedyDescriptionSeverityWeakness

Feb 17, 2025

Data Sourced

via NVD·12:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-0591?

CVE-2025-0591 is considered a high severity vulnerability due to the potential for attackers to read sensitive information or crash the application.

How do I fix CVE-2025-0591?

To fix CVE-2025-0591, ensure that you update the CX-Programmer software to the latest version released by Rockwell Automation.

What is the main impact of CVE-2025-0591?

The main impact of CVE-2025-0591 is the potential unauthorized access to sensitive data and application instability.

Which software is affected by CVE-2025-0591?

CVE-2025-0591 affects the Rockwell Automation CX-Programmer software.

Can CVE-2025-0591 be exploited remotely?

Yes, CVE-2025-0591 can potentially be exploited remotely by attackers to take advantage of the out-of-bounds read vulnerability.