CVE-2023-22366

CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Score

CVSS 3.1 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2023-01-17

Last modified

2025-04-03

Weaknesses

CWE-824

Affected products

• Cx-motion-mch Firmware (Omron)
• Cx-motion-mch (Omron Corporation)

References

• https://jvn.jp/en/vu/JVNVU91744508/index.html