CX
Product
CX-Programmer
28
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 21Medium 1Low 0
Watch
Add CX-Programmer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-0987 | 10.0 | Oct 6 | Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 rely on cleartext password transmission, which allows remote attackers to… Affected: through 9.5 |
| CVE-2022-3396 | 9.8 | Oct 6 | OMRON CX-Programmer Out-of-bounds Write Affected: through 9.78 |
| CVE-2022-3398 | 9.8 | Oct 6 | OMRON CX-Programmer Out-of-bounds Write Affected: through 9.78 |
| CVE-2022-3397 | 9.8 | Oct 6 | OMRON CX-Programmer Out-of-bounds Write Affected: through 9.78 |
| CVE-2023-22277 | 7.8 | Aug 3 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier Affected: through 9.79 |
| CVE-2023-22317 | 7.8 | Aug 3 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier Affected: through 9.79 |
| CVE-2023-22314 | 7.8 | Aug 3 | Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier Affected: through 9.79 |
| CVE-2023-38748 | 7.8 | Aug 3 | Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier Affected: through 9.80 |
| CVE-2023-38747 | 7.8 | Aug 3 | Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier Affected: through 9.80 |
| CVE-2023-38746 | 7.8 | Aug 3 | Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier Affected: through 9.80 |
| CVE-2022-43667 | 7.8 | Dec 7 | Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to… Affected: through 9.77 |
| CVE-2022-43509 | 7.8 | Dec 7 | Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a… Affected: through 9.77 |
| CVE-2022-43508 | 7.8 | Dec 7 | Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a… Affected: through 9.77 |
| CVE-2022-2979 | 7.8 | Sep 12 | Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution Affected: before 9.78 |
| CVE-2022-25325 | 7.8 | Mar 10 | Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code… Affected: before 9.77 |
| CVE-2022-25234 | 7.8 | Mar 10 | Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary… Affected: before 9.77 |
| CVE-2022-25230 | 7.8 | Mar 10 | Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code… Affected: before 9.77 |
| CVE-2022-21219 | 7.8 | Mar 10 | Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary… Affected: before 9.77 |
| CVE-2022-21124 | 7.8 | Mar 10 | Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary… Affected: before 9.77 |
| CVE-2018-18993 | 7.8 | Dec 4 | Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and… Affected: through 9.66 |
| CVE-2018-18989 | 7.8 | Dec 4 | In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project files, the application fails to check if… Affected: through 9.66 |
| CVE-2018-8834 | 7.8 | Apr 17 | Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and… Affected: through 9.65 |
| CVE-2018-7530 | 7.8 | Apr 17 | Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and… Affected: through 9.65 |
| CVE-2018-7514 | 7.8 | Apr 17 | Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and… Affected: through 9.65 |
| CVE-2022-31204 | 7.5 | Jul 26 | Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords Affected: before 9.6 |
| CVE-2019-6556 | 6.6 | Apr 10 | When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if it is referencing freed memory Affected: through 9.70 |
| CVE-2015-1015 | – | Oct 6 | Omron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1.5 use a reversible format for password storage in object files on Compact Flash… Affected: 9.5 |
| CVE-2015-0988 | – | Oct 6 | Omron CX-One CX-Programmer before 9.6 uses a reversible format for password storage in project source-code files, which makes it easier for local users to obtain sensitive… Affected: through 9.5 |
Showing 28