Priority LOW 38
This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior de…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01859 · Published 2021-02-09 · No fix listed CWE-843
Priority MEDIUM 49
The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.07937 · Published 2021-02-09 · No fix listed CWE-121
Priority MEDIUM 43
The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02785 · Published 2021-02-09 · No fix listed CWE-822
Priority LOW 37
Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01424 · Published 2019-01-30 · No fix listed CWE-843
Priority LOW 34
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2018-04-17 · No fix listed CWE-122
Priority LOW 34
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00327 · Published 2018-04-17 · No fix listed CWE-843
Priority LOW 34
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00318 · Published 2018-04-17 · No fix listed CWE-121