High severity7.8NVD Advisory· Published Aug 3, 2023· Updated Jun 17, 2026

CVE-2023-38747

Description

Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Omron/Cx Programmer2 versions
cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:*range: <=9.80
- (no CPE)range: <=V9.80
OMRON Corporation/CX-Programmerv5
Range: Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier

Patches

Vulnerability mechanics

References

jvn.jp/en/vu/JVNVU93286117/nvdThird Party Advisory
www.ia.omron.com/product/vulnerability/OMSR-2023-005_en.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000