2024-05-05 02:03:23 +00:00

28 lines
1.7 KiB
JSON

{
"id": "CVE-2024-31413",
"sourceIdentifier": "vultures@jpcert.or.jp",
"published": "2024-05-01T13:15:52.080",
"lastModified": "2024-05-01T19:50:25.633",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "Free of pointer not at start of buffer vulnerability exists in CX-One CX-One CXONE-AL[][]D-V4 (The version which was installed with a DVD ver. 4.61.1 or lower, and was updated through CX-One V4 auto update in January 2024 or prior) and Sysmac Studio SYSMAC-SE2[][][] (The version which was installed with a DVD ver. 1.56 or lower, and was updated through Sysmac Studio V1 auto update in January 2024 or prior). Opening a specially crafted project file may lead to arbitrary code execution."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad libre de puntero que no est\u00e1 al inicio del b\u00fafer en CX-One CX-One CXONE-AL[][]D-V4 (la versi\u00f3n que se instal\u00f3 con un DVD versi\u00f3n 4.61.1 o inferior y se actualiz\u00f3 a trav\u00e9s de CX- Una actualizaci\u00f3n autom\u00e1tica de V4 en enero de 2024 o antes) y Sysmac Studio SYSMAC-SE2[][][] (la versi\u00f3n que se instal\u00f3 con un DVD versi\u00f3n 1.56 o anterior y se actualiz\u00f3 mediante la actualizaci\u00f3n autom\u00e1tica de Sysmac Studio V1 en enero de 2024 o antes). previo). Abrir un archivo de proyecto especialmente manipulado puede provocar la ejecuci\u00f3n de c\u00f3digo arbitrario."
}
],
"metrics": {},
"references": [
{
"url": "https://jvn.jp/en/vu/JVNVU98274902/",
"source": "vultures@jpcert.or.jp"
},
{
"url": "https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-002_en.pdf",
"source": "vultures@jpcert.or.jp"
}
]
}