Vulnerability in Omron Corporation Cx-One Cxone-Al[][]d-V4
CVE-2024-31413
Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior) and Sysmac Studio SYSMAC-SE2[][][] (The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior). Opening a specially crafted project file may lead to arbitrary code execution.
EPSS: 0.002 (15.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Omron Corporation Cx-one Cxone-al[][]d-v4 — versions The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior
- Omron Corporation Sysmac Studio Sysmac-se2[][][] — versions The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-31413?
- CVE-2024-31413 is a medium-severity vulnerability in Omron Corporation Cx-One Cxone-Al[][]d-V4, classified under CWE-761. CVSS score: 5.9/10. Published 2024-05-01.
- How severe is CVE-2024-31413?
- Medium severity. CVSS v3 base score is 5.9 out of 10.