What’s Vulnerable › Vulnerabilities
CVE-2022-25230
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-03-10 · updated 2026-06-17
- Weakness: CWE-416
Description
Use after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary code execution by having a user to open a specially crafted CXP file. This vulnerability is different from CVE-2022-25325.
Affected products
- OMRON Corporation CX-Programmer: before 9.77 — fixed in 9.77
How to fix
Upgrade to a fixed version: OMRON Corporation CX-Programmer 9.77. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2022-25230 or the next vulnerability affects your stack