CVE-2022-43509

HIGH 7.8CVE-2022-43509 · Published 07/12/2022 · updated 17/06/2026

In short

CVE-2022-43509 is a HIGH (CVSS 7.8) vulnerability affecting cx-programmer (omron).
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cx-programmer omron	`≤ 9.77`	No fix yet

Description

Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.

References

jvn.jp/en/vu/JVNVU92877622/index.html · Third Party Advisory
jvn.jp/vu/JVNVU92877622/index.html · Third Party Advisory

More vulnerabilities in cx-programmer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cx-programmer

omron

≤ 9.77

No fix yet

More vulnerabilities in cx-programmer

See all →