Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.
References
| Link | Resource |
|---|---|
| https://www.electronics.jtekt.co.jp/en/topics/202410026928/ | Vendor Advisory |
| https://www.electronics.jtekt.co.jp/jp/topics/2024100217388/ | Vendor Advisory |
| https://jvn.jp/en/vu/JVNVU92808077/ | Third Party Advisory |
Configurations
History
15 Oct 2024, 18:21
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Jtekt kostac Plc
Jtekt |
|
| CWE | CWE-787 | |
| CPE | cpe:2.3:a:jtekt:kostac_plc:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | () https://jvn.jp/en/vu/JVNVU92808077/ - Third Party Advisory | |
| References | () https://www.electronics.jtekt.co.jp/jp/topics/2024100217388/ - Vendor Advisory | |
| References | () https://www.electronics.jtekt.co.jp/en/topics/202410026928/ - Vendor Advisory |
03 Oct 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-03 03:15
Updated : 2024-10-15 18:21
NVD link : CVE-2024-47135
Mitre link : CVE-2024-47135
JSON object : View
Products Affected
jtekt
- kostac_plc
CWE
CWE-787
Out-of-bounds Write