CVE-2025-0591: Out-of-bounds Read vulnerability in CX-Programmer
First published: Sun Feb 16 2025(Updated: )
Out-of-bounds Read vulnerability (CWE-125) was found in CX-Programmer. Attackers may be able to read sensitive information or cause an application crash by abusing this vulnerability.
Credit: bba440f9-ef23-4224-aa62-7ac0935d18d1
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Rockwell Automation CX-Programmer |
Remedy
Update your CX-Programmer to the countermeasure version to fix the vulnerability. For information on how to obtain and update the countermeasure version of the product, please contact our sales representative or distributor. You can update CX-One to the latest versions using the installed Omron Automation Software AutoUpdate tool.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-0591?
CVE-2025-0591 is considered a high severity vulnerability due to the potential for attackers to read sensitive information or crash the application.
How do I fix CVE-2025-0591?
To fix CVE-2025-0591, ensure that you update the CX-Programmer software to the latest version released by Rockwell Automation.
What is the main impact of CVE-2025-0591?
The main impact of CVE-2025-0591 is the potential unauthorized access to sensitive data and application instability.
Which software is affected by CVE-2025-0591?
CVE-2025-0591 affects the Rockwell Automation CX-Programmer software.
Can CVE-2025-0591 be exploited remotely?
Yes, CVE-2025-0591 can potentially be exploited remotely by attackers to take advantage of the out-of-bounds read vulnerability.
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/weakness
- agent/references
- agent/title
- agent/first-publish-date
- agent/type
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/source
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/event
- vendor/rockwell automation
- canonical/rockwell automation cx-programmer