← Back

Cx Programmer

cx-programmer

Vendor: Omron • 28 CVEs

CVEs (28)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-22277
1Omron
1Cx Programmer
Jun 17, 2026
Aug 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is diffe...Show more
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22317 and CVE-2023-22314.Show less
CVE-2023-22317
1Omron
1Cx Programmer
Jun 17, 2026
Aug 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is diffe...Show more
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22314.Show less
CVE-2023-22314
1Omron
1Cx Programmer
Jun 17, 2026
Aug 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is diffe...Show more
Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22317.Show less
CVE-2023-38748
1Omron
1Cx Programmer
Jun 17, 2026
Aug 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may o...Show more
Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.Show less
CVE-2023-38747
1Omron
1Cx Programmer
Jun 17, 2026
Aug 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code exe...Show more
Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.Show less
CVE-2023-38746
1Omron
1Cx Programmer
Jun 17, 2026
Aug 3, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execu...Show more
Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.Show less
CVE-2022-43667
1Omron
1Cx Programmer
Jun 17, 2026
Dec 7, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Stack-based buffer overflow vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
CVE-2022-43509
1Omron
1Cx Programmer
Jun 17, 2026
Dec 7, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Out-of-bounds write vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
CVE-2022-43508
1Omron
1Cx Programmer
Jun 17, 2026
Dec 7, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Use-after free vulnerability exists in CX-Programmer v.9.77 and earlier, which may lead to information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.
CVE-2022-3398
1Omron
1Cx Programmer
Jun 17, 2026
Oct 6, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
CVE-2022-3397
1Omron
1Cx Programmer
Jun 17, 2026
Oct 6, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
CVE-2022-3396
1Omron
1Cx Programmer
Jun 17, 2026
Oct 6, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code.
CVE-2022-2979
1Omron
1Cx Programmer
Jun 17, 2026
Sep 12, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution.
CVE-2022-31204
1Omron
8Cp1w Cif41 Firmware
Cx ProgrammerSysmac Cj2h Firmware+5 more
Jun 17, 2026
Jul 26, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensiti...Show more
Omron CS series, CJ series, and CP series PLCs through 2022-05-18 use cleartext passwords. They feature a UM Protection setting that allows users or system integrators to configure a password in order to restrict sensitive engineering operations (such as project/logic uploads and downloads). This password is set using the OMRON FINS command Program Area Protect and unset using the command Program Area Protect Clear, both of which are transmitted in cleartext.Show less
CVE-2022-25325
1Omron
1Cx Programmer
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a spec...Show more
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25230.Show less
CVE-2022-25234
1Omron
1Cx Programmer
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a...Show more
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-21124.Show less
CVE-2022-25230
1Omron
1Cx Programmer
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a spec...Show more
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25325.Show less
CVE-2022-21219
1Omron
1Cx Programmer
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a...Show more
Out-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file.Show less
CVE-2022-21124
1Omron
1Cx Programmer
Jun 17, 2026
Mar 10, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a...Show more
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25234.Show less
CVE-2019-6556
1Omron
2Common Components
Cx Programmer
Jun 17, 2026
Apr 10, 2019
N/A· v4
6.6 MEDIUM· v3
6.8 MEDIUM· v2
When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if it is referencing freed memory. An attacker could use a specially crafte...Show more
When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.Show less