CVE-2024-29219

Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://jvn.jp/en/vu/JVNVU95439120/
https://www.keyence.com/kv_vulnerability240924_en
https://jvn.jp/en/vu/JVNVU95439120/
https://www.keyence.com/kv_vulnerability240329_en

Configurations

No configuration.

History

21 Nov 2024, 09:07

Type	Values Removed	Values Added
References		() https://www.keyence.com/kv_vulnerability240329_en -
References	~~() https://jvn.jp/en/vu/JVNVU95439120/ -~~	() https://jvn.jp/en/vu/JVNVU95439120/ -

25 Sep 2024, 04:15

Type	Values Removed	Values Added
Summary	(en) Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file.	(en) Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file.
References	~~{'url': 'https://www.keyence.com/kv_vulnerability240329_en', 'source': 'vultures@jpcert.or.jp'}~~	() https://www.keyence.com/kv_vulnerability240924_en -

01 Aug 2024, 13:49

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.8
Summary		(es) Existe una vulnerabilidad de lectura fuera de los límites en KV STUDIO Ver.11.64 y anteriores y en KV REPLAY VIEWER Ver.2.64 y anteriores, lo que puede provocar la divulgación de información o la ejecución de código arbitrario al hacer que un usuario del producto afectado abra un archivo especialmente manipulado.
CWE		CWE-125

15 Apr 2024, 11:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-04-15 11:15

Updated : 2024-11-21 09:07

NVD link : CVE-2024-29219

Mitre link : CVE-2024-29219

CVE.ORG link : CVE-2024-29219

JSON object : View

Products Affected

No product.

CWE

CWE-125

Out-of-bounds Read

7.8 /10