VDB

CVE-2022-25234

CVE-2022-25234 PUBLISHED CVSS 6.800000190734863 MEDIUM

CX-Programmer provided by OMRON Corporation contains multiple vulnerabilities listed below. * Out-of-bounds Write (CWE-787) - CVE-2022-21124 * Use After Free (CWE-416) - CVE-2022-25230 * Use After Free (CWE-416) - CVE-2022-25325 * Out-of-bounds Read (CWE-125) - CVE-2022-21219 * Out-of-bounds Write (CWE-787) - CVE-2022-25234 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.

EPSS 1.03% · 61.6th percentile

Risk Scores

CVSS 2.0
6.800000190734863
EPSS Score
1.03%
61.6th percentile

Affected Products

VendorProductVersions
OMRON CorporationCX-One

Timeline

  • Mar 4, 2022 CVE Published
  • Mar 8, 2022 EPSS Score
  • Mar 15, 2022 EPSS Score
  • Apr 29, 2022 EPSS Score
  • Jun 20, 2022 EPSS Score
  • Aug 11, 2022 EPSS Score
  • Oct 2, 2022 EPSS Score
  • Nov 23, 2022 EPSS Score
  • Jan 14, 2023 EPSS Score
  • Apr 28, 2023 EPSS Score
  • Jun 18, 2023 EPSS Score
  • Aug 9, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›