CVE-2020-27257 Omron CX-One

This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices...

CVE-2020-27261 Omron CX-One

The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code...

CVE-2020-27261

Omron CX-One (versions 4.60 and earlier) contains a stack-based buffer overflow in the CX-One CX-Position component (NCI file parsing) caused by inadequate input validation of NCI configuration data, enabling remote arbitrary code execution. Affected apps include CX-Protocol (≤2.02), CX-Server (≤...

CVE-2020-27259

The CVE-2020-27259 issue affects Omron CX-One (versions 4.60 and prior), arising from an untrusted pointer dereference in CX-One’s NCI file parsing (CX-Position). This flaw can permit remote code execution, with exploitation tied to user interaction (visit a crafted page/file). The ZDI advisory s...

CVE-2020-27259: Untrusted Pointer Dereference

The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code...

CVE-2020-27261: Stack-based Buffer Overflow

The Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code...

CVE-2020-27257: Access of Resource Using Incompatible Type

This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices...

PT-2021-11348

Name of the Vulnerable Software and Affected Versions: Omron CX-One versions 4.60 and prior Description: This issue allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, resulting in a type-confusion condition. Recommendations: For Omron CX-O...

The vulnerability of the software package for creating the CX-Position position control system, the software package for describing procedures for serial data exchange between standard CX-Protocol devices, and the device compatibility system between Omron CX-Servers included in the Omron CX-One software suite, allows a hacker to execute arbitrary code using a specially created NCI file.

The vulnerabilities of the software package for creating the CX-Position position control system, the software package for describing procedures for serial data exchange between standard CX-Protocol devices, and the device compatibility system between Omron CX-Servers included in the Omron CX-One...

PT-2021-1696

Name of the Vulnerable Software and Affected Versions Omron CX-One versions 4.60 and prior Description The issue is related to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code. This is a result of a vulnerability in the Omron CX-One software package,...

PT-2021-1697

Name of the Vulnerable Software and Affected Versions Omron CX-One versions 4.60 and prior Description The issue is related to the lack of pointer value validation before dereferencing, which may allow a remote attacker to execute arbitrary code by supplying a pointer to arbitrary memory location...

Omron CX-One and CX-Protocol Buffer Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The products include inverters, temperature controllers, and PLC programming software, etc. CX-Protocol is one of the components used to create a serial communication protocol to communicate with standard serial devices. A buffer error...

Omron CX-One

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Omron Equipment: CX-One Vulnerabilities: Untrusted Pointer Dereference, Stack-based Buffer Overflow, Type Confusion 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being...

Omron CX-One and CX-Protocol Buffer Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The products include inverters, temperature controllers, and PLC programming software, etc. CX-Protocol is one of the components used to create a serial communication protocol to communicate with standard serial devices. A buffer error...

Omron CX-One and CX-Protocol Security Vulnerabilities

Omron CX-One is an integrated toolkit from Omron Japan. The products include inverters, temperature controllers, and PLC programming software, etc. CX-Protocol is one of the components used to create a serial communication protocol to communicate with standard serial devices. A security...

anaconda bug fix and enhancement update

The anaconda packages contain parts of the Anaconda installation program that allows reconfiguration and advanced installation options. Bug Fixes and Enhancements: Mellanox VPI and CX-4 adapter cards InfiniBand mode PXE boot of RHEL8.3 failed BZ1890261...

Aruba CX Switches Denial of Service Vulnerability

Aruba CX Switches is a switch from Aruba USA. A security vulnerability exists in Aruba CX Switches that can be exploited by an attacker to cause a local denial of service of the LLDP Link Layer Discovery Protocol process in the switch...

CVE-2020-7122

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP Cisco Discovery Protocol process in the switch. This applies to firmwa...

CVE-2020-7121

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the LLDP Link Layer Discovery Protocol process in the switch. This applies to...

CVE-2020-7122

Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local Denial of Service of the CDP Cisco Discovery Protocol process in the switch. This applies to firmwa...