Jtekt vulnerabilities
We track 15 vulnerabilities in Jtekt products across 30 products. 15 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2024.
Latest Jtekt vulnerabilities
- 7.8 High severity
Kostac PLC Programming Software (Former name…: Out-of-bounds Read
Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Vers
- 7.8 High severity
Kostac PLC Programming Software (Former name…: Out-of-bounds Write
Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Soft
- 7.8 High severity
Kostac PLC Programming Software (Former name…: Out-of-bounds Write
Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Ver
- 7.5 High severity
GC-A22W-CW: Uncontrolled Resource Consumption
Denial-of-service (DoS) vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
- 7.5 High severity
GC-A22W-CW: Uncontrolled Resource Consumption
Denial-of-service (DoS) vulnerability exists in rfe service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
- 7.5 High severity
GC-A22W-CW: Uncontrolled Resource Consumption
Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
- 7.5 High severity
GC-A22W-CW: Uncontrolled Resource Consumption
Denial-of-service (DoS) vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
- 7.8 High severity
Kostac PLC Programming Software: Use After Free
Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier bec
- 7.8 High severity
Kostac PLC Programming Software: Double Free
Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier be
- 7.8 High severity
Screen Creator: Stack-based Buffer Overflow
This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. T
- 7.8 High severity
Kostac PLC Programming Software (Former name…: Use After Free
Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. With the abnormal value given as the maximum number of columns for the PLC program, the process accesses the freed
- 7.8 High severity
Kostac PLC Programming Software (Former name…: Out-of-bounds Read
Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. The insufficient buffer size for the PLC program instructions leads to out-of-bounds read. As a result, opening
- 7.8 High severity
Kostac PLC Programming Software (Former name…: Out-of-bounds Read
Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. When processing a comment block in stage information, the end of data cannot be verified and out-of-bounds read
- 9.8 Critical severity
Pc10g-cpu Tcc-6353 Firmware: Insufficient Verification of Data Authenticity
JTEKT TOYOPUC PLCs through 2022-04-29 do not ensure data integrity. They utilize the unauthenticated CMPLink/TCP protocol for engineering purposes, including downloading projects and control logic to the PLC. Control logic is downloaded to the PLC on a block-b
- 9.1 Critical severity
pc10g-cpu_tcc-6353_firmware: Missing Authentication for Critical Functionality
JTEKT TOYOPUC PLCs through 2022-04-29 mishandle authentication. They utilize the CMPLink/TCP protocol (configurable on ports 1024-65534 on either TCP or UDP) for a wide variety of engineering purposes such as starting and stopping the PLC, downloading and uplo