CVE-2023-22419

Name of the Vulnerable Software and Affected Versions Kostac PLC Programming Software versions 1.6.9.0 and earlier

Description The issue is related to an out-of-bounds read vulnerability that occurs when processing a comment block in stage information. This can lead to information disclosure and/or arbitrary code execution when opening a specially crafted project file. The vulnerability is caused by the inability to verify the end of data, resulting in an out-of-bounds read.

Recommendations For versions 1.6.9.0 and earlier, consider avoiding the use of comment blocks in stage information until a patch is available. As a temporary workaround, restrict access to project files from untrusted sources to minimize the risk of exploitation.