CVE-2023-42138 - Vulnerability Details - OpenCVE

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Keyence	Kv Replay Viewer Kv Studio

Configuration 1 [-]

OR	cpe:2.3:a:keyence:kv_replay_viewer::::::::
	cpe:2.3:a:keyence:kv_studio::::::::

No data.

References

Link	Providers
https://jvn.jp/en/vu/JVNVU94752076/index.html
https://www.keyence.com/vulnerability231001

History

Wed, 18 Sep 2024 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2023-10-11T08:53:24.872Z

Updated: 2024-09-18T15:56:54.316Z

Reserved: 2023-09-08T02:20:58.383Z

Link: CVE-2023-42138

Vulnrichment

Updated: 2024-08-02T19:16:50.569Z

NVD

Status : Modified

Published: 2023-10-11T09:15:10.417

Modified: 2024-11-21T08:22:21.193

Link: CVE-2023-42138

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:keyence:kv_replay_viewer:*:*:*:*:*:*:*:*", "matchCriteriaId": "F7533712-71AB-44CD-86F7-7F694FE353B9", "versionEndExcluding": "2.63", "vulnerable": true}, {"criteria": "cpe:2.3:a:keyence:kv_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "0BFABC3F-F01D-4B37-9D66-929A396D2E27", "versionEndExcluding": "11.63", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file."}, {"lang": "es", "value": "Existe una vulnerabilidad de lectura fuera de l\u00edmites en KV STUDIO Ver. 11.62 y anteriores y KV REPLAY VIEWER Ver. 2.62 y anteriores. Si se explota esta vulnerabilidad, se puede divulgar informaci\u00f3n o se puede ejecutar c\u00f3digo arbitrario haciendo que un usuario de KV STUDIO PLAYER abra un archivo especialmente manipulado."}], "id": "CVE-2023-42138", "lastModified": "2024-11-21T08:22:21.193", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-11T09:15:10.417", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU94752076/index.html"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://www.keyence.com/vulnerability231001"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU94752076/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.keyence.com/vulnerability231001"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}]}