CVE-2023-22424 - CVE House
Back to Database
Status published Unknown CVE-2023-22424

Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name:...

Vulnerability Description

Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.9.0 and earlier. With the abnormal value given as the maximum number of columns for the PLC program, the process accesses the freed memory. As a result, opening a specially crafted project file may lead to information disclosure and/or arbitrary code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-22424

Credits & Attribution

No credits recorded in the NVD database.

References

More from JTEKT ELECTRONICS CORPORATION

View All →
CVE-2025-26401
Weak encoding for password vulnerability exists in HMI ViewJet C-more...
Medium 6.5
CVE-2025-25061
Unintended proxy or intermediary ('Confused Deputy') issue exists in HMI...
Medium 5.8
CVE-2025-24317
Allocation of resources without limits or throttling issue exists in...
Medium 5.3
CVE-2025-24310
Improper restriction of rendered UI layers or frames issue exists...
Medium 4.3
CVE-2024-47136
Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former...
High 7.8

Affected Vendor

JTEKT ELECTRONICS CORPORATION

View all reports →

Affected Software

Kostac PLC Programming Software (Former name: Koyo PLC Programming Software)
Vulnerable Versions:
Version 1.6.9.0 and earlier

Timeline

Official Publish: March 5th, 2023
Last Modified: March 7th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.