CVE-2022-3397 - OMRON CX-Programmer Out-of-bounds Write

Back Back to CVE browser

CRITICAL

OMRON CX-Programmer Out-of-bounds Write

Published Oct 6, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.71%

Description

OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.

Affected products

Vendor Omron Product CX-Programmer Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=9.78

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Omron

CX-Programmer

n/a

Version	Status	Constraints
unspecified	affected	<=9.78

Remediation

Vendor solution

Omron has released an update through their Auto Update Service to fix the reported issues. Omron recommends updating to the latest version: Omron CX-Programmer v9.79

For more information, users should see the Omron release note.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (1)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04
Third Party AdvisoryUS Government Resource

Link	Providers	Tags
https://www.cisa.gov/uscert/ics/advisories/icsa-22-277-04		Third Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Oct 6, 2022

Updated Apr 16, 2025

Reserved Oct 3, 2022

Link CVE-2022-3397

CISA Vulnrichment

Updated Apr 16, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-3397

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-3397