Search

Find a vulnerability

Search criteria

    1 vulnerability found for CX-Motion-MCH firmware by OMRON Corporation

    JVNDB-2023-001003

    Vulnerability from jvndb - Published: 2023-01-12 15:06 - Updated:2023-01-12 15:06
    Severity
    Summary
    Access of uninitialized pointer vulnerability in OMRON CX-Motion-MCH
    Details
    CX-Motion-MCH provided by OMRON Corporation contains an access of uninitialized pointer vulnerability (CWE-824, CVE-2023-22366). Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer.
    Impacted products
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001003.html",
      "dc:date": "2023-01-12T15:06+09:00",
      "dcterms:issued": "2023-01-12T15:06+09:00",
      "dcterms:modified": "2023-01-12T15:06+09:00",
      "description": "CX-Motion-MCH provided by OMRON Corporation contains an access of uninitialized pointer vulnerability (CWE-824, CVE-2023-22366).\r\n\r\nMichael Heinzl reported this vulnerability to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
      "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001003.html",
      "sec:cpe": {
        "#text": "cpe:/o:omron:cx-motion-mch_firmware",
        "@product": "CX-Motion-MCH firmware",
        "@vendor": "OMRON Corporation",
        "@version": "2.2"
      },
      "sec:cvss": {
        "@score": "7.8",
        "@severity": "High",
        "@type": "Base",
        "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "@version": "3.0"
      },
      "sec:identifier": "JVNDB-2023-001003",
      "sec:references": [
        {
          "#text": "https://jvn.jp/en/vu/JVNVU91744508/index.html",
          "@id": "JVNVU#91744508",
          "@source": "JVN"
        },
        {
          "#text": "https://www.cve.org/CVERecord?id=CVE-2023-22366",
          "@id": "CVE-2023-22366",
          "@source": "CVE"
        },
        {
          "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-22366",
          "@id": "CVE-2023-22366",
          "@source": "NVD"
        },
        {
          "#text": "https://cwe.mitre.org/data/definitions/824.html",
          "@id": "CWE-824",
          "@title": "Access of Uninitialized Pointer(CWE-824)"
        }
      ],
      "title": "Access of uninitialized pointer vulnerability in OMRON CX-Motion-MCH"
    }