Vulnerability · Published Apr 15, 2024 · Assigned by jpcert
CVE-2024-29218
High 8.8
In plain English
A high-severity out-of-bounds write in KV REPLAY VIEWER from KEYENCE CORPORATION. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.8%top 41.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Out-of-bounds write vulnerability exists in KV STUDIO Ver.11.64 and earlier, KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| KEYENCE CORPORATION | KV STUDIO | Ver.11.64 and earlier |
| KEYENCE CORPORATION | KV REPLAY VIEWER | Ver.2.64 and earlier |
| KEYENCE CORPORATION | VT5-WX15/WX12 | Ver.6.02 and earlier |
Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H