CVE-2023-42138

Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://jvn.jp/en/vu/JVNVU94752076/index.html	Third Party Advisory
https://www.keyence.com/vulnerability231001	Vendor Advisory
https://jvn.jp/en/vu/JVNVU94752076/index.html	Third Party Advisory
https://www.keyence.com/vulnerability231001	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:keyence:kv_replay_viewer::::::::
	cpe:2.3:a:keyence:kv_studio::::::::

History

21 Nov 2024, 08:22

Type	Values Removed	Values Added
References	~~() https://jvn.jp/en/vu/JVNVU94752076/index.html - Third Party Advisory~~	() https://jvn.jp/en/vu/JVNVU94752076/index.html - Third Party Advisory
References	~~() https://www.keyence.com/vulnerability231001 - Vendor Advisory~~	() https://www.keyence.com/vulnerability231001 - Vendor Advisory

Information

Published : 2023-10-11 09:15

Updated : 2024-11-21 08:22

NVD link : CVE-2023-42138

Mitre link : CVE-2023-42138

CVE.ORG link : CVE-2023-42138

JSON object : View

Products Affected

keyence

kv_studio
kv_replay_viewer

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2023-42138", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2023-10-11T09:15:10.417", "references": [{"url": "https://jvn.jp/en/vu/JVNVU94752076/index.html", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://www.keyence.com/vulnerability231001", "tags": ["Vendor Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://jvn.jp/en/vu/JVNVU94752076/index.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.keyence.com/vulnerability231001", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file."}, {"lang": "es", "value": "Existe una vulnerabilidad de lectura fuera de l\u00edmites en KV STUDIO Ver. 11.62 y anteriores y KV REPLAY VIEWER Ver. 2.62 y anteriores. Si se explota esta vulnerabilidad, se puede divulgar informaci\u00f3n o se puede ejecutar c\u00f3digo arbitrario haciendo que un usuario de KV STUDIO PLAYER abra un archivo especialmente manipulado."}], "lastModified": "2024-11-21T08:22:21.193", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:keyence:kv_replay_viewer:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7533712-71AB-44CD-86F7-7F694FE353B9", "versionEndExcluding": "2.63"}, {"criteria": "cpe:2.3:a:keyence:kv_studio:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BFABC3F-F01D-4B37-9D66-929A396D2E27", "versionEndExcluding": "11.63"}], "operator": "OR"}]}], "sourceIdentifier": "vultures@jpcert.or.jp"}