What’s Vulnerable › Vulnerabilities

CVE-2024-47136

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-03 · updated 2026-06-17
• Weakness: CWE-125

Description

Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.

Affected products

• JTEKT ELECTRONICS CORPORATION Kostac PLC Programming Software: before 1.6.15.0 — fixed in 1.6.15.0

How to fix

Upgrade to a fixed version: JTEKT ELECTRONICS CORPORATION Kostac PLC Programming Software 1.6.15.0. Check the vendor advisory for mitigations.

References

• https://jvn.jp/en/vu/JVNVU92808077/
• https://www.electronics.jtekt.co.jp/en/topics/202410026928/
• https://www.electronics.jtekt.co.jp/jp/topics/2024100217388/

Get alerted when CVE-2024-47136 or the next vulnerability affects your stack