CVE-2024-49501

Published: Nov 1, 2024Modified: Nov 1, 2024

5.7

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Exploitability: 2.5 / Impact: 2.7

Source: vultures@jpcert.or.jp (Secondary)

Description

Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is exploited, an attacker may access the program which is protected by Data Protection function.

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (3)

https://jvn.jp/en/vu/JVNVU95685374

Source: vultures@jpcert.or.jp

https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2024-006_en.pdf

Source: vultures@jpcert.or.jp

https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2024-006_ja.pdf

Source: vultures@jpcert.or.jp

Timeline

No history available yet.