Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Priority MEDIUM 40

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0212 Published 2022-04-01 No fix listed CWE-121
Priority LOW 39

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01504 Published 2022-04-01 No fix listed CWE-787
Priority LOW 39

Omron CX-Position (versions 2.5.3 and prior) is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01504 Published 2022-04-01 No fix listed CWE-416
TI-2020-16583 CVE-2020-27257 · GHSA-j58q-jg6x-x4h9

Type confusion in OMRON Corporation CX-One

Priority LOW 38

This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior de…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01859 Published 2021-02-09 No fix listed CWE-843
Priority MEDIUM 49

The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07937 Published 2021-02-09 No fix listed CWE-121