Description
The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Omron | CX-One | unspecified – ≤ 4.60 | — |
| Omron | CX-Protocol | unspecified – ≤ 2.02 | — |
| Omron | CX-Server | unspecified – ≤ 5.0.28 | — |
| Omron | CX-Position | unspecified – ≤ 2.52 | — |
Advisories 1
- ICSA-21-007-02 Omron CX-One CISA ICS & IT advisories · Jan 7, 2021