CVE | CVE-2023-22421 |
CVE Title | |
Published Date | 2023-03-06T00:15Z |
Modified Date | 2023-03-13T18:06Z |
CWE Type | CWE-125 |
CVSS 3.x | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Description | Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. The insufficient buffer size for the PLC program instructions leads to out-of-bounds read. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution. |
References | |
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites. | |
Reference URL | https://www.electronics.jtekt.co.jp/jp/topics/2023030313639/ |
Reference Description | MISC https://www.electronics.jtekt.co.jp/jp/topics/2023030313639/ |
Reference URL | https://www.electronics.jtekt.co.jp/en/topics/202303035258/ |
Reference Description | MISC https://www.electronics.jtekt.co.jp/en/topics/202303035258/ |
Reference URL | https://jvn.jp/en/vu/JVNVU94966432/ |
Reference Description | MISC https://jvn.jp/en/vu/JVNVU94966432/ |
Tags | Vendor Advisory |
Sources | NIST MITRE |