Description
This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Omron | CX-One | unspecified – ≤ 4.60 | — |
| Omron | CX-Protocol | unspecified – ≤ 2.02 | — |
| Omron | CX-Server | unspecified – ≤ 5.0.28 | — |
| Omron | CX-Position | unspecified – ≤ 2.52 | — |
Advisories 1
- ICSA-21-007-02 Omron CX-One CISA ICS & IT advisories · Jan 7, 2021