Lucene search

K
cvelistIcscertCVELIST:CVE-2022-3396
HistoryOct 04, 2022 - 12:00 a.m.

CVE-2022-3396 OMRON CX-Programmer Out-of-bounds Write

2022-10-0400:00:00
CWE-787
icscert
www.cve.org
2
omron cx-programmer
out-of-bounds write
version 9.78

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.3%

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.

CNA Affected

[
  {
    "vendor": "OMRON",
    "product": "CX-Programmer",
    "versions": [
      {
        "version": "unspecified",
        "lessThanOrEqual": "9.78",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.3%

Related for CVELIST:CVE-2022-3396