Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

TI-2020-16583 CVE-2020-27257 · GHSA-j58q-jg6x-x4h9

Type confusion in OMRON Corporation CX-One

Priority LOW 38

This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior de…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01859 Published 2021-02-09 No fix listed CWE-843
Priority MEDIUM 49

The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07937 Published 2021-02-09 No fix listed CWE-121
Priority LOW 37

Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01424 Published 2019-01-30 No fix listed CWE-843
Priority LOW 34

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00318 Published 2018-04-17 No fix listed CWE-122
TI-2018-05439 CVE-2018-7530 · GHSA-rwjj-72mq-wxxc

Type confusion in ICS-CERT Omron CX-One

Priority LOW 34

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00327 Published 2018-04-17 No fix listed CWE-843
Priority LOW 34

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00318 Published 2018-04-17 No fix listed CWE-121