{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-42138", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "state": "PUBLISHED", "assignerShortName": "jpcert", "dateReserved": "2023-09-08T02:20:58.383Z", "datePublished": "2023-10-11T08:53:24.872Z", "dateUpdated": "2024-09-18T15:56:54.316Z"}, "containers": {"cna": {"affected": [{"vendor": "KEYENCE CORPORATION", "product": "KV STUDIO", "versions": [{"version": "Ver. 11.62 and earlier", "status": "affected"}]}, {"vendor": "KEYENCE CORPORATION", "product": "KV REPLAY VIEWER", "versions": [{"version": "Ver. 2.62 and earlier", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file."}], "problemTypes": [{"descriptions": [{"description": "Out-of-bounds read", "lang": "en", "type": "text"}]}], "references": [{"url": "https://www.keyence.com/vulnerability231001"}, {"url": "https://jvn.jp/en/vu/JVNVU94752076/index.html"}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2023-10-11T08:53:24.872Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T19:16:50.569Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.keyence.com/vulnerability231001", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU94752076/index.html", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-18T15:56:37.843128Z", "id": "CVE-2023-42138", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-18T15:56:54.316Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.keyence.com/vulnerability231001", "tags": ["x_transferred"]}, {"url": "https://jvn.jp/en/vu/JVNVU94752076/index.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T19:16:50.569Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-42138", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-18T15:56:37.843128Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-18T15:56:49.885Z"}}], "cna": {"affected": [{"vendor": "KEYENCE CORPORATION", "product": "KV STUDIO", "versions": [{"status": "affected", "version": "Ver. 11.62 and earlier"}]}, {"vendor": "KEYENCE CORPORATION", "product": "KV REPLAY VIEWER", "versions": [{"status": "affected", "version": "Ver. 2.62 and earlier"}]}], "references": [{"url": "https://www.keyence.com/vulnerability231001"}, {"url": "https://jvn.jp/en/vu/JVNVU94752076/index.html"}], "descriptions": [{"lang": "en", "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "Out-of-bounds read"}]}], "providerMetadata": {"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert", "dateUpdated": "2023-10-11T08:53:24.872Z"}}}, "cveMetadata": {"cveId": "CVE-2023-42138", "state": "PUBLISHED", "dateUpdated": "2024-09-18T15:56:54.316Z", "dateReserved": "2023-09-08T02:20:58.383Z", "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "datePublished": "2023-10-11T08:53:24.872Z", "assignerShortName": "jpcert"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:keyence:kv_replay_viewer:*:*:*:*:*:*:*:*", "matchCriteriaId": "F7533712-71AB-44CD-86F7-7F694FE353B9", "versionEndExcluding": "2.63", "vulnerable": true}, {"criteria": "cpe:2.3:a:keyence:kv_studio:*:*:*:*:*:*:*:*", "matchCriteriaId": "0BFABC3F-F01D-4B37-9D66-929A396D2E27", "versionEndExcluding": "11.63", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Out-of-bounds read vulnerability exists in KV STUDIO Ver. 11.62 and earlier and KV REPLAY VIEWER Ver. 2.62 and earlier. If this vulnerability is exploited, information may be disclosed or arbitrary code may be executed by having a user of KV STUDIO PLAYER open a specially crafted file."}, {"lang": "es", "value": "Existe una vulnerabilidad de lectura fuera de l\u00edmites en KV STUDIO Ver. 11.62 y anteriores y KV REPLAY VIEWER Ver. 2.62 y anteriores. Si se explota esta vulnerabilidad, se puede divulgar informaci\u00f3n o se puede ejecutar c\u00f3digo arbitrario haciendo que un usuario de KV STUDIO PLAYER abra un archivo especialmente manipulado."}], "id": "CVE-2023-42138", "lastModified": "2023-10-18T19:57:05.243", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-11T09:15:10.417", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Third Party Advisory"], "url": "https://jvn.jp/en/vu/JVNVU94752076/index.html"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://www.keyence.com/vulnerability231001"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}