CVE-2023-38748

Description

Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.

Reserved 2023-07-25 | Published 2023-08-03 | Updated 2024-10-17 | Assigner jpcert

Problem types

Use after free

Product status

Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier
affected

References

www.ia.omron.com/product/vulnerability/OMSR-2023-005_en.pdf

jvn.jp/en/vu/JVNVU93286117/

cve.org (CVE-2023-38748)

nvd.nist.gov (CVE-2023-38748)

Download JSON