The vulnerability of the software package for creating the CX-Position position control system, the software package for describing procedures for serial data exchange between standard CX-Protocol devices, and the device compatibility system between Omron CX-Servers included in the Omron CX-One software suite, allows a hacker to execute arbitrary code using a specially created NCI file.

🗓️ 28 Jan 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

Buffer overflow flaws in Omron CX-One components allow remote code execution via a crafted NCI file.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2020-27261	9 Feb 202118:40	–	circl
CNNVD	Omron CX-One and CX-Protocol Buffer Error Vulnerability	7 Jan 202100:00	–	cnnvd
Check Point Advisories	Omron CX-One Stack Buffer Overflow (CVE-2020-27261)	26 Aug 202100:00	–	checkpoint_advisories
CVE	CVE-2020-27261	9 Feb 202114:09	–	cve
Cvelist	CVE-2020-27261 Omron CX-One	9 Feb 202114:09	–	cvelist
EUVD	EUVD-2020-19774	7 Oct 202500:30	–	euvd
ICS	Omron CX-One	7 Jan 202100:00	–	ics
NVD	CVE-2020-27261	9 Feb 202115:15	–	nvd
OSV	CVE-2020-27261	9 Feb 202115:15	–	osv
Prion	Stack overflow	9 Feb 202115:15	–	prion

Vulners

Node

OR

omron_electronics_llc cx-oneMatch4.40

omron_electronics_llc cx-oneMatch4.41

omron_electronics_llc cx-oneMatch4.42

omron_electronics_llc cx-oneMatch4.6

omron_electronics_llc omron_cx-serverRange<5.0.29

omron_electronics_llc omron_cx-protocolRange<2.03

omron_electronics_llc omron_cx-positionRange<2.53

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021010805
ics-cert	www.ics-cert.us-cert.gov/advisories/icsa-21-007-02
web	www.web.nvd.nist.gov/view/vuln/detail

01 Dec 2021 00:00Current

8High risk

Vulners AI Score8

CVSS 38.8

CVSS 210

EPSS0.07612

Omron CX-One NCI file remote code execution buffer overflow stack vulnerability cx position system cx protocol procedures