ICSA-21-007-02

Omron CX-One

view advisory published 2021-01-07

Worldwide

describes (3)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-27261US	high8.8	7.61% (95th)	—	2021-02-09
The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
CVE-2020-27259US	high8.8	2.67% (86th)	—	2021-02-09
The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code.
CVE-2020-27257US	high7.8	1.78% (78th)	—	2021-02-09
This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in th…

references

External citations — patches, advisories, analysis.

remediations (18)

MitigationCX-Position
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Protocol: Version 2.03
MitigationCX-Position
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Protocol: Version 2.03
MitigationCX-Position
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Protocol: Version 2.03
MitigationCX-Protocol
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Protocol: Version 2.03
MitigationCX-Protocol
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Protocol: Version 2.03
MitigationCX-Protocol
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Protocol: Version 2.03
MitigationCX-Server
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Protocol: Version 2.03
MitigationCX-Server
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Protocol: Version 2.03
MitigationCX-Server
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Protocol: Version 2.03
FixedCX-Position
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Position Version 2.53
FixedCX-Position
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Position Version 2.53
FixedCX-Position
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Position Version 2.53
FixedCX-Protocol
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Position Version 2.53
FixedCX-Protocol
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Position Version 2.53
FixedCX-Protocol
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Position Version 2.53
FixedCX-Server
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Position Version 2.53
FixedCX-Server
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Position Version 2.53
FixedCX-Server
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service and are as follows: CX-Position Version 2.53

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan