ICSA-22-088-02

icsaUScisa_csaf_ot

Omron CX-Position

Advisory ansehen veröffentlicht 2022-03-29

Successful exploitation of these vulnerabilities when parsing an NCI file could allow code execution.

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-26419UShigh7.8—
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to…
CVE-2022-26417UShigh7.8—
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arb…
CVE-2022-26022UShigh7.8—
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code…
CVE-2022-25959UShigh7.8—
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to memory corruption while processing a specific project file, which may allow an attacker to execute arbitrary code.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan