CVE-2023-22366

Published: Jan 17, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Affected (1)

Products: Omron: Cx Motion Mch Firmware

Omron

1 product

Cx Motion Mch Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Omron Cx Motion Mch Firmware	Before 2.33

Running on/with	Platform Versions
Omron Cx Motion Mch	All versions

Related CWEs

CWE-824

Access of Uninitialized Pointer

The product accesses or uses a pointer that has not been initialized.

References (2)

https://jvn.jp/en/vu/JVNVU91744508/index.html

Source: vultures@jpcert.or.jp

Third Party Advisory

https://jvn.jp/en/vu/JVNVU91744508/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.