Vulnerability · Published Apr 15, 2024 · Assigned by jpcert
CVE-2024-29219
High 7.8
In plain English
A high-severity out-of-bounds read in KV REPLAY VIEWER from KEYENCE CORPORATION. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 23% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 77.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Out-of-bounds read vulnerability exists in KV STUDIO Ver.11.64 and earlier and KV REPLAY VIEWER Ver.2.64 and earlier, and VT5-WX15/WX12 Ver.6.02 and earlier, which may lead to information disclosure or arbitrary code execution by having a user of the affected product open a specially crafted file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| KEYENCE CORPORATION | KV STUDIO | Ver.11.64 and earlier |
| KEYENCE CORPORATION | KV REPLAY VIEWER | Ver.2.64 and earlier |
| KEYENCE CORPORATION | VT5-WX15/WX12 | Ver.6.02 and earlier |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H