VulnerabilityModified
CVE-2023-42138
Out-of-bounds read vulnerability exists in KV STUDIO Ver.
HIGH 7.8EPSS 0.19%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.19%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 0.19% probability · 8th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-125
- Affected
- keyence/kv replay viewer · keyence/kv studio
- Source
- vultures@jpcert.or.jp
References
- https://jvn.jp/en/vu/JVNVU94752076/index.htmlThird Party Advisory
- https://www.keyence.com/vulnerability231001Vendor Advisory
- https://jvn.jp/en/vu/JVNVU94752076/index.htmlThird Party Advisory
- https://www.keyence.com/vulnerability231001Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.