CVE-2023-38748

Summary

Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.

Affected Software

Weaknesses

• Use after free

ADP Enrichment

CVE Program Container

Additional References

• https://www.ia.omron.com/product/vulnerability/OMSR-2023-005_en.pdf
• https://jvn.jp/en/vu/JVNVU93286117/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.ia.omron.com/product/vulnerability/OMSR-2023-005_en.pdf
• https://jvn.jp/en/vu/JVNVU93286117/

• ←Previous
• Next→