CyberSecBulletin

JTEKT ELECTRONICS vulnerabilities

We track 22 vulnerabilities in JTEKT ELECTRONICS products across 14 products. 22 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2024.

22vulnerabilities
0critical
22high
0exploited
7.7average CVSS score

Latest JTEKT ELECTRONICS vulnerabilities

  • 7.8 High severity

    Kostac PLC Programming Software (Former name…: Out-of-bounds Read

    CVE-2024-47136JTEKT ELECTRONICS

    Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Vers

  • 7.8 High severity

    Kostac PLC Programming Software (Former name…: Out-of-bounds Write

    CVE-2024-47135JTEKT ELECTRONICS

    Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Soft

  • 7.8 High severity

    Kostac PLC Programming Software (Former name…: Out-of-bounds Write

    CVE-2024-47134JTEKT ELECTRONICS

    Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Ver

  • 7.5 High severity

    GC-A22W-CW: Uncontrolled Resource Consumption

    CVE-2023-49713JTEKT ELECTRONICS

    Denial-of-service (DoS) vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

  • 7.5 High severity

    GC-A22W-CW: Uncontrolled Resource Consumption

    CVE-2023-49143JTEKT ELECTRONICS

    Denial-of-service (DoS) vulnerability exists in rfe service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

  • 7.5 High severity

    GC-A22W-CW: Uncontrolled Resource Consumption

    CVE-2023-49140JTEKT ELECTRONICS

    Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

  • 7.5 High severity

    GC-A22W-CW: Uncontrolled Resource Consumption

    CVE-2023-41963JTEKT ELECTRONICS

    Denial-of-service (DoS) vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.

  • 7.8 High severity

    OnSinView2: Out-of-bounds Write

    CVE-2023-42507JTEKT ELECTRONICS

    Stack-based buffer overflow vulnerability exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user open a specially crafted OnSinView2 project file.

  • 7.8 High severity

    OnSinView2: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-42506JTEKT ELECTRONICS

    Improper restriction of operations within the bounds of a memory buffer issue exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user open a specially

  • 7.8 High severity

    Kostac PLC Programming Software: Use After Free

    CVE-2023-41375JTEKT ELECTRONICS

    Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier bec

  • 7.8 High severity

    Kostac PLC Programming Software: Double Free

    CVE-2023-41374JTEKT ELECTRONICS

    Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier be

  • 7.8 High severity

    Screen Creator Advance 2: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2023-25755JTEKT ELECTRONICS

    Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) due to improper check of its data size when processing a project file. If a user of Screen Creator Adva

  • 7.8 High severity

    Kostac PLC Programming Software (Former name…: Use After Free

    CVE-2023-22424JTEKT ELECTRONICS

    Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. With the abnormal value given as the maximum number of columns for the PLC program, the process accesses the freed

  • 7.8 High severity

    Kostac PLC Programming Software (Former name…: Out-of-bounds Read

    CVE-2023-22421JTEKT ELECTRONICS

    Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. The insufficient buffer size for the PLC program instructions leads to out-of-bounds read. As a result, opening

  • 7.8 High severity

    Kostac PLC Programming Software (Former name…: Out-of-bounds Read

    CVE-2023-22419JTEKT ELECTRONICS

    Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. When processing a comment block in stage information, the end of data cannot be verified and out-of-bounds read

  • 7.8 High severity

    Screen Creator Advance 2: Use After Free

    CVE-2023-22360JTEKT ELECTRONICS

    Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even when an error was detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead t

  • 7.8 High severity

    Screen Creator Advance 2: Out-of-bounds Read

    CVE-2023-22353JTEKT ELECTRONICS

    Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing control management information. Having a user of Screen Creator Advance 2 to open a specially crafted

  • 7.8 High severity

    Screen Creator Advance 2: Out-of-bounds Read

    CVE-2023-22350JTEKT ELECTRONICS

    Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing parts management information. Having a user of Screen Creator Advance 2 to open a specially crafted pr

  • 7.8 High severity

    Screen Creator Advance 2: Out-of-bounds Read

    CVE-2023-22349JTEKT ELECTRONICS

    Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing screen management information. Having a user of Screen Creator Advance 2 to open a specially crafted p

  • 7.8 High severity

    Screen Creator Advance 2: Out-of-bounds Read

    CVE-2023-22347JTEKT ELECTRONICS

    Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing file structure information. Having a user of Screen Creator Advance 2 to open a specially crafted proj

  • 7.8 High severity

    Screen Creator Advance 2: Out-of-bounds Read

    CVE-2023-22346JTEKT ELECTRONICS

    Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing template information. Having a user of Screen Creator Advance 2 to open a specially crafted project fi

  • 7.8 High severity

    Screen Creator Advance 2: Out-of-bounds Write

    CVE-2023-22345JTEKT ELECTRONICS

    Out-of-bound write vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process when out of specification errors are detected. Having a user of Screen Creator Advance 2 to open a specially crafted proje