Skip to content
OpenAdvisories
High ICSA-21-007-02 3 CVEs

Omron CX-One

Published Jan 7, 2021 · Updated Jan 7, 2021

Vendor: Omron Product: CX-Position Product: CX-Protocol Product: CX-Server

Summary

Worldwide

Vulnerabilities 3

  • Unscored —
    CVE-2020-27257

    Omron CX-One

    This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices.

    Omron CX-Position CX-One CX-Protocol ICS / OT
  • Unscored —
    CVE-2020-27259

    Omron CX-One

    The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code.

    Omron CX-Position CX-One CX-Server ICS / OT
  • Unscored —
    CVE-2020-27261

    Omron CX-One

    The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

    Omron CX-Position CX-One CX-Protocol ICS / OT

Revision history

  1. #1

    ICSA-21-007-02 Omron CX-One

References