CVE-2022-25230 — Vulnetix

CVE-2022-25230 PUBLISHED CVSS 6.800000190734863 MEDIUM

CX-Programmer provided by OMRON Corporation contains multiple vulnerabilities listed below. * Out-of-bounds Write (CWE-787) - CVE-2022-21124 * Use After Free (CWE-416) - CVE-2022-25230 * Use After Free (CWE-416) - CVE-2022-25325 * Out-of-bounds Read (CWE-125) - CVE-2022-21219 * Out-of-bounds Write (CWE-787) - CVE-2022-25234 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.

EPSS 0.51% · 66.2th percentile

Risk Scores

CVSS v2.0

6.800000190734863

EPSS Score

0.51%

66.2th percentile

Affected Products

Vendor	Product	Versions
OMRON Corporation	CX-One

Timeline

Mar 4, 2022 CVE Published
Mar 8, 2022 EPSS Score
Mar 15, 2022 EPSS Score
Apr 28, 2022 EPSS Score
Jun 18, 2022 EPSS Score
Aug 9, 2022 EPSS Score
Sep 29, 2022 EPSS Score
Nov 18, 2022 EPSS Score
Jan 8, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 20, 2023 EPSS Score
Jun 10, 2023 EPSS Score

References

https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-001384.html advisory

Open in Interactive Console →