CVE-2023-22322

Published: Jan 30, 2023Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and earlier. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is installed may be disclosed.

Affected (1)

Products: Omron: Cx Motion Pro

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Omron Cx Motion Pro	Before 1.4.6.014

Related CWEs

Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (2)

https://jvn.jp/en/vu/JVNVU94200979/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://jvn.jp/en/vu/JVNVU94200979/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.