https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-45792.htmlhttps://patchthecve.com/cve/CVE-2022-45792.htmlWed, 17 Jun 2026 05:10:44 +0000HIGH 7.8: Project files may contain malicious contents which the software will use to create files on the filesystem. This allows directory traversal and overwriting files with the privileges of the logged-in user.https://patchthecve.com/cve/CVE-2022-45790.htmlhttps://patchthecve.com/cve/CVE-2022-45790.htmlWed, 17 Jun 2026 05:10:44 +0000HIGH 8.6: The Omron FINS protocol has an authenticated feature to prevent access to memory regions. Authentication is susceptible to bruteforce attack, which may allow an adversary to gain access to protected memory. This access can allow overwrite of values including programmed logic.https://patchthecve.com/cve/CVE-2022-45794.htmlhttps://patchthecve.com/cve/CVE-2022-45794.htmlWed, 17 Jun 2026 05:10:44 +0000HIGH 8.6: An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card. https://patchthecve.com/cve/CVE-2022-45793.htmlhttps://patchthecve.com/cve/CVE-2022-45793.htmlWed, 17 Jun 2026 05:10:44 +0000MEDIUM 5.5: Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.https://patchthecve.com/cve/CVE-2023-22277.htmlhttps://patchthecve.com/cve/CVE-2023-22277.htmlWed, 17 Jun 2026 05:34:56 +0000HIGH 7.8: Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22317 and CVE-2023-22314.https://patchthecve.com/cve/CVE-2023-22317.htmlhttps://patchthecve.com/cve/CVE-2023-22317.htmlWed, 17 Jun 2026 05:35:01 +0000HIGH 7.8: Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22314.https://patchthecve.com/cve/CVE-2023-22314.htmlhttps://patchthecve.com/cve/CVE-2023-22314.htmlWed, 17 Jun 2026 05:35:01 +0000HIGH 7.8: Use after free vulnerability exists in CX-Programmer Ver.9.79 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur. This vulnerability is different from CVE-2023-22277 and CVE-2023-22317.https://patchthecve.com/cve/CVE-2023-38748.htmlhttps://patchthecve.com/cve/CVE-2023-38748.htmlWed, 17 Jun 2026 06:11:05 +0000HIGH 7.8: Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.https://patchthecve.com/cve/CVE-2023-38747.htmlhttps://patchthecve.com/cve/CVE-2023-38747.htmlWed, 17 Jun 2026 06:11:05 +0000HIGH 7.8: Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.https://patchthecve.com/cve/CVE-2023-38746.htmlhttps://patchthecve.com/cve/CVE-2023-38746.htmlWed, 17 Jun 2026 06:11:05 +0000HIGH 7.8: Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.https://patchthecve.com/cve/CVE-2023-38744.htmlhttps://patchthecve.com/cve/CVE-2023-38744.htmlWed, 17 Jun 2026 06:11:05 +0000HIGH 7.5: Denial-of-service (DoS) vulnerability due to improper validation of specified type of input issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit. If an affected product receives a packet which is specially crahttps://patchthecve.com/cve/CVE-2023-27396.htmlhttps://patchthecve.com/cve/CVE-2023-27396.htmlWed, 17 Jun 2026 05:44:56 +0000CRITICAL 9.8: FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues -- (1)P