Skip to content
OpenAdvisories
High ICSA-22-088-02 4 CVEs

Omron CX-Position

Published Mar 29, 2022 · Updated Mar 29, 2022

Vendor: Omron Product: CX-Position

Summary

Successful exploitation of these vulnerabilities when parsing an NCI file could allow code execution.

Vulnerabilities 4

  • High 7.8
    CVE-2022-25959

    Rockwell Automation Studio 5000 Logix Designer Improper Restriction of Operations within the Bounds of a Memory Buffer

    Omron CX-Position (versions 2.5.3 and prior) is vulnerable to memory corruption while processing a specific project file, which may allow an attacker to execute arbitrary code.

    Omron CX-Position ICS / OT
  • High 7.8
    CVE-2022-26022

    Rockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write

    Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code.

    Omron CX-Position ICS / OT
  • High 7.8
    CVE-2022-26417

    Rockwell Automation Studio 5000 Logix Designer Use After Free

    Omron CX-Position (versions 2.5.3 and prior) is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arbitrary code.

    Omron CX-Position ICS / OT
  • High 7.8
    CVE-2022-26419

    Rockwell Automation Studio 5000 Logix Designer Code Injection

    Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code.

    Omron CX-Position ICS / OT

Revision history

  1. #1

    ICSA-22-088-02 Omron CX-Position

References