Vulnerability-Lookup

CVE-2024-29219 (GCVE-0-2024-29219)

Vulnerability from cvelistv5 – Published: 2024-04-15 10:41 – Updated: 2025-09-19 17:21

Summary

Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-16 16:04 UTC

CWE

CWE-125 - Out-of-bounds read

Assigner

jpcert CNA under the jpcert root

CNA scorecard C 64/100 over 190 records in the last 180 days details

References

3 references

URL	Tags
https://www.keyence.com/kv_vulnerability240924_en
https://jvn.jp/en/vu/JVNVU95439120/
https://www.keyence.com/kv_vulnerability240329_en	x_transferred

Impacted products

5 products

Vendor	Product	Version	CPE status
KEYENCE CORPORATION	KV STUDIO	Affected: Ver.11.64 and earlier	guessed
KEYENCE CORPORATION	KV REPLAY VIEWER	Affected: Ver.2.64 and earlier	guessed
KEYENCE CORPORATION	VT5-WX15/WX12	Affected: Ver.6.02 and earlier	guessed
keyence	kv_replay_viewer	Affected: 0 , ≤ 2.64 (custom) cpe:2.3:a:keyence:kv_replay_viewer::::::::
keyence	kv_studio	Affected: 0 , ≤ 11.64 (custom) cpe:2.3:a:keyence:kv_studio::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:keyence:kv_replay_viewer:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "kv_replay_viewer",
            "vendor": "keyence",
            "versions": [
              {
                "lessThanOrEqual": "2.64",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:keyence:kv_studio:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "kv_studio",
            "vendor": "keyence",
            "versions": [
              {
                "lessThanOrEqual": "11.64",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-29219",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-16T16:04:52.454295Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-09-19T17:21:43.118Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T01:10:54.602Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.keyence.com/kv_vulnerability240329_en"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU95439120/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "KV STUDIO",
          "vendor": "KEYENCE CORPORATION",
          "versions": [
            {
              "status": "affected",
              "version": "Ver.11.64 and earlier"
            }
          ]
        },
        {
          "product": "KV REPLAY VIEWER",
          "vendor": "KEYENCE CORPORATION",
          "versions": [
            {
              "status": "affected",
              "version": "Ver.2.64 and earlier"
            }
          ]
        },
        {
          "product": "VT5-WX15/WX12",
          "vendor": "KEYENCE CORPORATION",
          "versions": [
            {
              "status": "affected",
              "version": "Ver.6.02 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds read",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-25T03:59:23.777Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.keyence.com/kv_vulnerability240924_en"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU95439120/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2024-29219",
    "datePublished": "2024-04-15T10:41:33.292Z",
    "dateReserved": "2024-03-19T02:07:19.158Z",
    "dateUpdated": "2025-09-19T17:21:43.118Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-29219",
      "date": "2026-10-15",
      "epss": "0.00297",
      "percentile": "0.20881"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "KV STUDIO",
                "vendor": "KEYENCE CORPORATION",
                "versions": [
                  {
                    "status": "affected",
                    "version": "Ver.11.64 and earlier"
                  }
                ]
              },
              {
                "product": "KV REPLAY VIEWER",
                "vendor": "KEYENCE CORPORATION",
                "versions": [
                  {
                    "status": "affected",
                    "version": "Ver.2.64 and earlier"
                  }
                ]
              },
              {
                "product": "VT5-WX15/WX12",
                "vendor": "KEYENCE CORPORATION",
                "versions": [
                  {
                    "status": "affected",
                    "version": "Ver.6.02 and earlier"
                  }
                ]
              }
            ],
            "source": "vultures@jpcert.or.jp"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:keyence:kv_replay_viewer:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "kv_replay_viewer",
                "vendor": "keyence",
                "versions": [
                  {
                    "lessThanOrEqual": "2.64",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:keyence:kv_studio:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "kv_studio",
                "vendor": "keyence",
                "versions": [
                  {
                    "lessThanOrEqual": "11.64",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:keyence:kv_replay_viewer:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5D9F5A92-6195-4415-A328-337BDCD5C391",
                    "versionEndIncluding": "2.64",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:keyence:kv_studio:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F7B7AF88-7E5B-4CAC-A548-033DBEE9E1C9",
                    "versionEndIncluding": "11.64",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:keyence:vt5-wx15_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E68010F1-7935-4D0D-9F03-CE87D8717ADA",
                    "versionEndIncluding": "6.02",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:keyence:vt5-wx15:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AA61E229-B8F6-4448-9625-366A1012A903",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:keyence:vt5-wx12_firmware:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1FA67FB0-5E52-4203-B311-ADAB4A3A603F",
                    "versionEndIncluding": "6.02",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:h:keyence:vt5-wx12:-:*:*:*:*:*:*:*",
                    "matchCriteriaId": "280DBDC0-502B-4F0A-AABA-6B88082C74B1",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file."
          },
          {
            "lang": "es",
            "value": "Existe una vulnerabilidad de lectura fuera de los l\u00edmites en KV STUDIO Ver.11.64 y anteriores y en KV REPLAY VIEWER Ver.2.64 y anteriores, lo que puede provocar la divulgaci\u00f3n de informaci\u00f3n o la ejecuci\u00f3n de c\u00f3digo arbitrario al hacer que un usuario del producto afectado abra un archivo especialmente manipulado."
          }
        ],
        "id": "CVE-2024-29219",
        "lastModified": "2026-06-17T07:22:39.230",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-29219",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-16T16:04:52.454295Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-04-15T11:15:08.593",
        "references": [
          {
            "source": "vultures@jpcert.or.jp",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU95439120/"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.keyence.com/kv_vulnerability240924_en"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU95439120/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.keyence.com/kv_vulnerability240329_en"
          }
        ],
        "sourceIdentifier": "vultures@jpcert.or.jp",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-125"
              }
            ],
            "source": "vultures@jpcert.or.jp",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T21:25:45+00:00",
      "cve": "CVE-2024-29219",
      "id": "CVE-2024-29219",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2024-29219",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-29219.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T01:10:54.602Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.keyence.com/kv_vulnerability240329_en"
              },
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://jvn.jp/en/vu/JVNVU95439120/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:keyence:kv_replay_viewer:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "kv_replay_viewer",
                "vendor": "keyence",
                "versions": [
                  {
                    "lessThanOrEqual": "2.64",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:keyence:kv_studio:*:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "kv_studio",
                "vendor": "keyence",
                "versions": [
                  {
                    "lessThanOrEqual": "11.64",
                    "status": "affected",
                    "version": "0",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "LOCAL",
                  "availabilityImpact": "HIGH",
                  "baseScore": 7.8,
                  "baseSeverity": "HIGH",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "REQUIRED",
                  "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-29219",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-07-16T16:04:52.454295Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-07-16T16:04:48.470Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "KV STUDIO",
              "vendor": "KEYENCE CORPORATION",
              "versions": [
                {
                  "status": "affected",
                  "version": "Ver.11.64 and earlier"
                }
              ]
            },
            {
              "product": "KV REPLAY VIEWER",
              "vendor": "KEYENCE CORPORATION",
              "versions": [
                {
                  "status": "affected",
                  "version": "Ver.2.64 and earlier"
                }
              ]
            },
            {
              "product": "VT5-WX15/WX12",
              "vendor": "KEYENCE CORPORATION",
              "versions": [
                {
                  "status": "affected",
                  "version": "Ver.6.02 and earlier"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-125",
                  "description": "Out-of-bounds read",
                  "lang": "en-US",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-09-25T03:59:23.777Z",
            "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
            "shortName": "jpcert"
          },
          "references": [
            {
              "url": "https://www.keyence.com/kv_vulnerability240924_en"
            },
            {
              "url": "https://jvn.jp/en/vu/JVNVU95439120/"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "assignerShortName": "jpcert",
        "cveId": "CVE-2024-29219",
        "datePublished": "2024-04-15T10:41:33.292Z",
        "dateReserved": "2024-03-19T02:07:19.158Z",
        "dateUpdated": "2025-09-19T17:21:43.118Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

BDU:2024-03218 (CVE-2024-29219)

Vulnerability from fstec – Published: 2024-04-24 – Updated: 2024-04-24 – View on bdu.fstec.ru Fixed

Title

Уязвимость программного средства программирования ПЛК (программируемых логических контроллеров) KEYENCE CORPORATION KV STUDIO и программного обеспечения просмотра и анализа данных контроллеров KV REPLAY VIEWER, связанная с чтением за границами памяти, позволяющая нарушителю выполнить произвольный код

Summary

Уязвимость программного средства программирования ПЛК (программируемых логических контроллеров) KEYENCE CORPORATION KV STUDIO и программного обеспечения просмотра и анализа данных контроллеров KV REPLAY VIEWER связана с чтением за границами памяти. Эксплуатация уязвимости может позволить нарушителю , действующему удаленно, выполнить произвольный код

Severity

7.2 (High) CVSS 2.0


                      
                        AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-125 - Чтение за границами буфера

Aliases

CVE-2024-29219

References

2 references

URL
https://jvn.jp/en/vu/JVNVU95439120/
https://www.cybersecurity-help.cz/vdb/SB2024040221

Impacted products

2 products from 1 vendor

Vendors

Keyence Corporation

Products

KV STUDIO, KV REPLAY VIEWER

Versions

до 11.64 включительно (KV STUDIO), до 2.64 включительно (KV REPLAY VIEWER)

Product types

Средство АСУ ТП, Industrial control system software

Mitigations

Использование рекомендаций: https://jvn.jp/en/vu/JVNVU95439120/

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Keyence Corporation",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 11.64 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (KV STUDIO), \u0434\u043e 2.64 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (KV REPLAY VIEWER)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://jvn.jp/en/vu/JVNVU95439120/",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "15.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "24.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "24.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-03218",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-29219",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "KV STUDIO, KV REPLAY VIEWER",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u041f\u041b\u041a (\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432) KEYENCE CORPORATION KV STUDIO \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 KV REPLAY VIEWER, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0427\u0442\u0435\u043d\u0438\u0435 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 (CWE-125)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u041f\u041b\u041a (\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432) KEYENCE CORPORATION KV STUDIO \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 KV REPLAY VIEWER \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e , \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://jvn.jp/en/vu/JVNVU95439120/\nhttps://www.cybersecurity-help.cz/vdb/SB2024040221",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u0421\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-125",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

FKIE_CVE-2024-29219

Vulnerability from fkie_nvd - Published: 2024-04-15 11:15 - Updated: 2026-06-17 07:22

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
vultures@jpcert.or.jp	https://jvn.jp/en/vu/JVNVU95439120/	Third Party Advisory
vultures@jpcert.or.jp	https://www.keyence.com/kv_vulnerability240924_en	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://jvn.jp/en/vu/JVNVU95439120/	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.keyence.com/kv_vulnerability240329_en	Vendor Advisory

Impacted products

Vendor	Product	Version
keyence	kv_replay_viewer	*
keyence	kv_studio	*
keyence	vt5-wx15_firmware	*
keyence	vt5-wx15	-
keyence	vt5-wx12_firmware	*
keyence	vt5-wx12	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "KV STUDIO",
          "vendor": "KEYENCE CORPORATION",
          "versions": [
            {
              "status": "affected",
              "version": "Ver.11.64 and earlier"
            }
          ]
        },
        {
          "product": "KV REPLAY VIEWER",
          "vendor": "KEYENCE CORPORATION",
          "versions": [
            {
              "status": "affected",
              "version": "Ver.2.64 and earlier"
            }
          ]
        },
        {
          "product": "VT5-WX15/WX12",
          "vendor": "KEYENCE CORPORATION",
          "versions": [
            {
              "status": "affected",
              "version": "Ver.6.02 and earlier"
            }
          ]
        }
      ],
      "source": "vultures@jpcert.or.jp"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:keyence:kv_replay_viewer:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "kv_replay_viewer",
          "vendor": "keyence",
          "versions": [
            {
              "lessThanOrEqual": "2.64",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:keyence:kv_studio:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "kv_studio",
          "vendor": "keyence",
          "versions": [
            {
              "lessThanOrEqual": "11.64",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:keyence:kv_replay_viewer:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D9F5A92-6195-4415-A328-337BDCD5C391",
              "versionEndIncluding": "2.64",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:keyence:kv_studio:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7B7AF88-7E5B-4CAC-A548-033DBEE9E1C9",
              "versionEndIncluding": "11.64",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:keyence:vt5-wx15_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E68010F1-7935-4D0D-9F03-CE87D8717ADA",
              "versionEndIncluding": "6.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:keyence:vt5-wx15:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA61E229-B8F6-4448-9625-366A1012A903",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:keyence:vt5-wx12_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1FA67FB0-5E52-4203-B311-ADAB4A3A603F",
              "versionEndIncluding": "6.02",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:keyence:vt5-wx12:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "280DBDC0-502B-4F0A-AABA-6B88082C74B1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad de lectura fuera de los l\u00edmites en KV STUDIO Ver.11.64 y anteriores y en KV REPLAY VIEWER Ver.2.64 y anteriores, lo que puede provocar la divulgaci\u00f3n de informaci\u00f3n o la ejecuci\u00f3n de c\u00f3digo arbitrario al hacer que un usuario del producto afectado abra un archivo especialmente manipulado."
    }
  ],
  "id": "CVE-2024-29219",
  "lastModified": "2026-06-17T07:22:39.230",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-29219",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-07-16T16:04:52.454295Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-04-15T11:15:08.593",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://jvn.jp/en/vu/JVNVU95439120/"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.keyence.com/kv_vulnerability240924_en"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://jvn.jp/en/vu/JVNVU95439120/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.keyence.com/kv_vulnerability240329_en"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-125"
        }
      ],
      "source": "vultures@jpcert.or.jp",
      "type": "Secondary"
    }
  ]
}

GHSA-RV7P-JC8Q-JRFW

Vulnerability from github – Published: 2024-04-15 12:30 – Updated: 2024-09-25 06:30

Details

Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file.

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-29219"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-125"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-04-15T11:15:08Z",
    "severity": "HIGH"
  },
  "details": "Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file.",
  "id": "GHSA-rv7p-jc8q-jrfw",
  "modified": "2024-09-25T06:30:42Z",
  "published": "2024-04-15T12:30:34Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29219"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/en/vu/JVNVU95439120"
    },
    {
      "type": "WEB",
      "url": "https://www.keyence.com/kv_vulnerability240329_en"
    },
    {
      "type": "WEB",
      "url": "https://www.keyence.com/kv_vulnerability240924_en"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2024-29219

Vulnerability from gsd - Updated: 2024-04-02 05:02

Details

Aliases

CVE-2024-29219

JSON

To clipboard

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-29219"
      ],
      "details": "Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file.",
      "id": "GSD-2024-29219",
      "modified": "2024-04-02T05:02:57.445834Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "vultures@jpcert.or.jp",
        "ID": "CVE-2024-29219",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "KV STUDIO",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "Ver.11.64 and earlier"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "KV REPLAY VIEWER",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "Ver.2.64 and earlier"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "KEYENCE CORPORATION"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Out-of-bounds read"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.keyence.com/kv_vulnerability240329_en",
            "refsource": "MISC",
            "url": "https://www.keyence.com/kv_vulnerability240329_en"
          },
          {
            "name": "https://jvn.jp/en/vu/JVNVU95439120/",
            "refsource": "MISC",
            "url": "https://jvn.jp/en/vu/JVNVU95439120/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "cve": {
        "descriptions": [
          {
            "lang": "en",
            "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file."
          },
          {
            "lang": "es",
            "value": "Existe una vulnerabilidad de lectura fuera de los l\u00edmites en KV STUDIO Ver.11.64 y anteriores y en KV REPLAY VIEWER Ver.2.64 y anteriores, lo que puede provocar la divulgaci\u00f3n de informaci\u00f3n o la ejecuci\u00f3n de c\u00f3digo arbitrario al hacer que un usuario del producto afectado abra un archivo especialmente manipulado."
          }
        ],
        "id": "CVE-2024-29219",
        "lastModified": "2024-04-15T13:15:31.997",
        "metrics": {},
        "published": "2024-04-15T11:15:08.593",
        "references": [
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://jvn.jp/en/vu/JVNVU95439120/"
          },
          {
            "source": "vultures@jpcert.or.jp",
            "url": "https://www.keyence.com/kv_vulnerability240329_en"
          }
        ],
        "sourceIdentifier": "vultures@jpcert.or.jp",
        "vulnStatus": "Awaiting Analysis"
      }
    }
  }
}

JVNDB-2024-003049

Vulnerability from jvndb - Published: 2024-04-01 03:31 - Updated:2024-09-25 04:51

Severity

7.8 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Multiple vulnerabilities in KEYENCE KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12

Details

KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12 provided by KEYENCE CORPORATION contain multiple vulnerabilities listed below. * Out-of-bounds write (CWE-787) - CVE-2024-29218 * Out-of-bounds read (CWE-125) - CVE-2024-29219 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.

References

Type

URL

	JVN	https://jvn.jp/en/vu/JVNVU95439120/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-29218
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-29219
	Out-of-bounds Read(CWE-125)	https://cwe.mitre.org/data/definitions/125.html
	Out-of-bounds Write(CWE-787)	https://cwe.mitre.org/data/definitions/787.html

Impacted products

Vendor

Product

	KEYENCE CORPORATION.	VT5-WX12
	KEYENCE CORPORATION.	VT5-WX15
	KEYENCE CORPORATION.	KV REPLAY VIEWER
	KEYENCE CORPORATION.	KV STUDIO

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-003049.html",
  "dc:date": "2024-09-25T13:51+09:00",
  "dcterms:issued": "2024-04-01T12:31+09:00",
  "dcterms:modified": "2024-09-25T13:51+09:00",
  "description": "KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12 provided by KEYENCE CORPORATION contain multiple vulnerabilities listed below.\r\n\r\n  * Out-of-bounds write (CWE-787) - CVE-2024-29218\r\n  * Out-of-bounds read (CWE-125) - CVE-2024-29219\r\n\r\nMichael Heinzl reported these vulnerabilities to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-003049.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:keyence:keyence_vt5-wx12",
      "@product": "VT5-WX12",
      "@vendor": "KEYENCE CORPORATION.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:keyence:keyence_vt5-wx15",
      "@product": "VT5-WX15",
      "@vendor": "KEYENCE CORPORATION.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:keyence:kv_replay_viewer",
      "@product": "KV REPLAY VIEWER",
      "@vendor": "KEYENCE CORPORATION.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:keyence:kv_studio",
      "@product": "KV STUDIO",
      "@vendor": "KEYENCE CORPORATION.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.8",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2024-003049",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU95439120/index.html",
      "@id": "JVNVU#95439120",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-29218",
      "@id": "CVE-2024-29218",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-29219",
      "@id": "CVE-2024-29219",
      "@source": "CVE"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/125.html",
      "@id": "CWE-125",
      "@title": "Out-of-bounds Read(CWE-125)"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/787.html",
      "@id": "CWE-787",
      "@title": "Out-of-bounds Write(CWE-787)"
    }
  ],
  "title": "Multiple vulnerabilities in KEYENCE KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-29219 (GCVE-0-2024-29219)

BDU:2024-03218 (CVE-2024-29219)

FKIE_CVE-2024-29219

GHSA-RV7P-JC8Q-JRFW

GSD-2024-29219

JVNDB-2024-003049

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour