Approved changes feed: RSS · Atom

cpe:2.3:a:jtekt:kostac_plc_programming_software:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJtekt (b21cc368-02a2-5c13-b688-68df09e03434)
ProductKostac Plc Programming Software (72982564-d351-54b8-8898-b2445334e2f2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-47136 vulnerable 2026-06-08 06:48:11.491281 Details available
HIGH (7.8)
Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.
Published: 2024-10-03T02:54:16.204Z
Updated: 2024-10-03T15:29:25.895Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47135 vulnerable 2026-06-08 06:48:11.488942 Details available
HIGH (7.8)
Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.
Published: 2024-10-03T02:53:46.102Z
Updated: 2024-10-03T15:32:41.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47134 vulnerable 2026-06-08 06:48:11.474231 Details available
HIGH (7.8)
Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files.
Published: 2024-10-03T02:53:19.594Z
Updated: 2024-10-03T15:34:44.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22424 vulnerable 2026-06-08 05:54:25.966094 Details available
Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. With the abnormal value given as the maximum number of columns for the PLC program, the process accesses the freed memory. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
Published: 2023-03-05T00:00:00.000Z
Updated: 2025-03-07T15:48:36.711Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22421 vulnerable 2026-06-08 05:54:25.965062 Details available
Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. The insufficient buffer size for the PLC program instructions leads to out-of-bounds read. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution.
Published: 2023-03-05T00:00:00.000Z
Updated: 2025-03-07T18:15:14.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22419 vulnerable 2026-06-08 05:54:25.964612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.