CVE-2020-27259 Omron CX-One

2021-01-0700:00:00

CWE-822

icscert

www.cve.org

8.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.1%

JSON

The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code.

CNA Affected

[
  {
    "product": "CX-One",
    "vendor": "Omron",
    "versions": [
      {
        "lessThanOrEqual": "4.60",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CX-Protocol ",
    "vendor": "Omron",
    "versions": [
      {
        "lessThanOrEqual": "2.02",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CX-Server",
    "vendor": "Omron",
    "versions": [
      {
        "lessThanOrEqual": "5.0.28",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CX-Position",
    "vendor": "Omron",
    "versions": [
      {
        "lessThanOrEqual": "2.52",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]