Jtekt Kostac PLC vulnerabilities

4 CVEs affecting Jtekt Kostac PLC, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47136, published 2024-10-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-47135, published 2024-10-03. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted…
CVE-2024-47136, published 2024-10-03. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project…
CVE-2023-41375, published 2023-09-20. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Use after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using…
CVE-2023-41374, published 2023-09-20. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Double free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier. Arbitrary code may be executed by having a user open a specially crafted project file which was saved using…