CVE-2024-31413

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-31413
Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior) and Sysmac Studio SYSMAC-SE2[][][] (The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior). Opening a specially crafted project file may lead to arbitrary code execution.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.5 / Impact : 3.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://jvn.jp/en/vu/JVNVU98274902/
https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-002_en.pdf
https://jvn.jp/en/vu/JVNVU98274902/
https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-002_en.pdf
Configurations

No configuration.

History

14 Mar 2025, 15:15

Type Values Removed Values Added
CWE CWE-761

21 Nov 2024, 09:13

Type Values Removed Values Added
References () https://jvn.jp/en/vu/JVNVU98274902/ - () https://jvn.jp/en/vu/JVNVU98274902/ -
References () https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-002_en.pdf - () https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-002_en.pdf -

03 Jul 2024, 01:54

Type Values Removed Values Added
Summary
  • (es) Existe una vulnerabilidad libre de puntero que no está al inicio del búfer en CX-One CX-One CXONE-AL[][]D-V4 (la versión que se instaló con un DVD versión 4.61.1 o inferior y se actualizó a través de CX- Una actualización automática de V4 en enero de 2024 o antes) y Sysmac Studio SYSMAC-SE2[][][] (la versión que se instaló con un DVD versión 1.56 o anterior y se actualizó mediante la actualización automática de Sysmac Studio V1 en enero de 2024 o antes). previo). Abrir un archivo de proyecto especialmente manipulado puede provocar la ejecución de código arbitrario.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.9

01 May 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-01 13:15

Updated : 2025-03-14 15:15

NVD link : CVE-2024-31413

Mitre link : CVE-2024-31413

CVE.ORG link : CVE-2024-31413

JSON object : View

Products Affected

No product.

CWE
CWE-761

Free of Pointer not at Start of Buffer