Cx Programmer
Vendor:
First CVE: Oct 6, 2015 · Active for 10 years
28
Total CVEs
More Total CVEs than 96% of tracked products
5.6
Avg CVEs / Year
Higher CVE frequency than 90% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 60% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Cx Programmer over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 6, 2015
10 years ago
Most Recent CVE
Aug 3, 2023
1,086 days ago
CVE Severity & Scoring
Cx Programmer28 CVEs
75%
14%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local21 (75.0%)
Network5 (17.9%)
Unknown2 (7.1%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low26 (92.9%)
High0 (0.0%)
Unknown2 (7.1%)
User Interaction
None8 (28.6%)
Unknown2 (7.1%)
Required18 (64.3%)
Privileges Required
Low3 (10.7%)
High0 (0.0%)
None23 (82.1%)
Unknown2 (7.1%)
Top CVEs
Signals from CVEs in this product scope (28 CVEs).
28 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-3398CRITICAL OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. | Oct 6, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-3396CRITICAL OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. | Oct 6, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-3397CRITICAL OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. | Oct 6, 2022 | 9.8 | 29 | NO | NO |
CVE-2022-43509HIGH Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a sp | Dec 7, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-43508HIGH Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a special | Dec 7, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-2979HIGH Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution. | Sep 12, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-21219HIGH Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary co | Mar 10, 2022 | 7.8 | 25 | NO | NO |
CVE-2018-18993HIGH Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prio | Dec 4, 2018 | 7.8 | 25 | NO | NO |
CVE-2018-7514HIGH Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prio | Apr 17, 2018 | 7.8 | 25 | NO | NO |
CVE-2022-25325HIGH Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code e | Mar 10, 2022 | 7.8 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (28 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (28 CVEs).
Media Mentions
Signals from CVEs in this product scope (28 CVEs).
Top CNAs Publishing CVEs For Cx Programmer
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.5 | 1 | 2.1 | 0.4% | 0 | 0 |