CVE-2020-27261 - Omron CX-One

Back Back to CVE browser

HIGH

Omron CX-One

Published Feb 9, 2021

8.8

HIGH

CVSS 3.1

EPSS 7.61%

Description

The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

Affected products

Vendor Omron Product CX-One Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=4.60
Vendor Omron Product CX-Position Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=2.52
Vendor Omron Product CX-Protocol Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=2.02
Vendor Omron Product CX-Server Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=5.0.28

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Omron

CX-One

n/a

Version	Status	Constraints
unspecified	affected	<=4.60

Omron

CX-Position

n/a

Version	Status	Constraints
unspecified	affected	<=2.52

Omron

CX-Protocol

n/a

Version	Status	Constraints
unspecified	affected	<=2.02

Omron

CX-Server

n/a

Version	Status	Constraints
unspecified	affected	<=5.0.28

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-121

CWE-787

Out-of-bounds Write

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19774
Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-007-02
x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-183/
x_refsource_MISCThird Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-185/
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19774		Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-21-007-02		x_refsource_MISCThird Party AdvisoryUS Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-183/		x_refsource_MISCThird Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-185/		x_refsource_MISCThird Party Advisory