Read the docs

OMRON Corporation

Records98All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical16CVSS 9.0–10.0
CVSS high58CVSS 7.0–8.9

Exploited now

OMRON Corporation records in CISA KEV

No OMRON Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records in Cx-position · all components

Priority MEDIUM 49

The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07937 Published 2021-02-09 No fix listed CWE-121
Priority MEDIUM 40

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0212 Published 2022-04-01 No fix listed CWE-121
Priority LOW 39

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01504 Published 2022-04-01 No fix listed CWE-416
Priority LOW 39

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01504 Published 2022-04-01 No fix listed CWE-787
TI-2020-16583 CVE-2020-27257 · GHSA-j58q-jg6x-x4h9

Type confusion in OMRON Corporation CX-One

Priority LOW 38

This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior de…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01859 Published 2021-02-09 No fix listed CWE-843
Open these records in search →