Omron CX-Position
Successful exploitation of these vulnerabilities when parsing an NCI file could allow code execution.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-26419US | high7.8 | — | ||
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to… | ||||
| CVE-2022-26417US | high7.8 | — | ||
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arb… | ||||
| CVE-2022-26022US | high7.8 | — | ||
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code… | ||||
| CVE-2022-25959US | high7.8 | — | ||
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to memory corruption while processing a specific project file, which may allow an attacker to execute arbitrary code. | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationCX-Position
Omron has provided Version 2.5.4, which is only available to paying users who use the “Auto Update” function. Please contact Omron technical Support or an Omron representative for specific update information.
https://automation.omron.com/en/us/services/technical-support - MitigationCX-Position
Omron has provided Version 2.5.4, which is only available to paying users who use the “Auto Update” function. Please contact Omron technical Support or an Omron representative for specific update information.
https://automation.omron.com/en/us/services/technical-support - MitigationCX-Position
Omron has provided Version 2.5.4, which is only available to paying users who use the “Auto Update” function. Please contact Omron technical Support or an Omron representative for specific update information.
https://automation.omron.com/en/us/services/technical-support - MitigationCX-Position
Omron has provided Version 2.5.4, which is only available to paying users who use the “Auto Update” function. Please contact Omron technical Support or an Omron representative for specific update information.
https://automation.omron.com/en/us/services/technical-support
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan