Lucene search
+L

52 matches found

NVD
NVD
added 2022/04/01 11:15 p.m.25 views

CVE-2022-25959

Omron CX-Position versions 2.5.3 and prior is vulnerable to memory corruption while processing a specific project file, which may allow an attacker to execute arbitrary code...

7.8CVSS0.0138EPSS
Exploits0References2
Prion
Prion
added 2022/04/01 11:15 p.m.20 views

Out-of-bounds

Omron CX-Position versions 2.5.3 and prior is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code...

6.8CVSS7.9AI score0.01409EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2022/04/01 11:15 p.m.20 views

Stack overflow

Omron CX-Position versions 2.5.3 and prior is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code...

6.8CVSS7.9AI score0.01985EPSS
Exploits0References5Affected Software1
Prion
Prion
added 2022/04/01 11:15 p.m.18 views

Memory corruption

Omron CX-Position versions 2.5.3 and prior is vulnerable to memory corruption while processing a specific project file, which may allow an attacker to execute arbitrary code...

6.8CVSS7.9AI score0.0138EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2022/04/01 11:15 p.m.17 views

Memory corruption

Omron CX-Position versions 2.5.3 and prior is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arbitrary code...

6.8CVSS7.9AI score0.01409EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/01 10:17 p.m.6 views

CVE-2022-26419 Rockwell Automation Studio 5000 Logix Designer Code Injection

Omron CX-Position versions 2.5.3 and prior is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code...

7.8CVSS8AI score0.01985EPSS
Exploits0References5
Cvelist
Cvelist
added 2022/04/01 10:17 p.m.35 views

CVE-2022-26419 Rockwell Automation Studio 5000 Logix Designer Code Injection

Omron CX-Position versions 2.5.3 and prior is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code...

7.8CVSS8.2AI score0.01985EPSS
Exploits0References5
CVE
CVE
added 2022/04/01 10:17 p.m.98 views

CVE-2022-26419

CVE-2022-26419 affects Omron CX-Position (versions 2.5.3 and earlier). The vulnerability stems from stack-based buffer overflows during parsing of a specific project file (NCI/CX-Position files), caused by insufficient validation when copying user-controlled data into fixed-size buffers. This can...

7.8CVSS7.9AI score0.01985EPSS
Exploits0References5Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/01 10:17 p.m.5 views

CVE-2022-26022 Rockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write

Omron CX-Position versions 2.5.3 and prior is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.01409EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/04/01 10:17 p.m.43 views

CVE-2022-26022 Rockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write

Omron CX-Position versions 2.5.3 and prior is vulnerable to an out-of-bounds write while processing a specific project file, which may allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.01409EPSS
Exploits0References2
CVE
CVE
added 2022/04/01 10:17 p.m.86 views

CVE-2022-26022

CVE-2022-26022 affects Omron CX-Position (versions 2.5.3 and prior). The issue is an out-of-bounds write that occurs while processing a specific project file (NCI file), enabling arbitrary code execution in the context of the compromised process. Public sources consistently describe it as a memor...

7.8CVSS7.9AI score0.01409EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/04/01 10:17 p.m.5 views

CVE-2022-26417 Rockwell Automation Studio 5000 Logix Designer Use After Free

Omron CX-Position versions 2.5.3 and prior is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.01409EPSS
Exploits0References2
CVE
CVE
added 2022/04/01 10:17 p.m.89 views

CVE-2022-26417

CVE-2022-26417 affects Omron CX-Position (versions 2.5.3 and prior) and is caused by a use-after-free in parsing a specific project file (NCI). This could allow code execution in the context of the affected process. Mitigation: Omron released Version 2.5.4. Public exploit details are not provided...

7.8CVSS7.9AI score0.01409EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/01 10:17 p.m.40 views

CVE-2022-26417 Rockwell Automation Studio 5000 Logix Designer Use After Free

Omron CX-Position versions 2.5.3 and prior is vulnerable to a use after free memory condition while processing a specific project file, which may allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.01409EPSS
Exploits0References2
CVE
CVE
added 2022/04/01 10:17 p.m.83 views

CVE-2022-25959

Summary: CVE-2022-25959 affects Omron CX-Position, version 2.5.3 and earlier. The issue is a memory corruption vulnerability that occurs while parsing a specific project file (NCI file) in the CX-Position module, which can allow an attacker to execute arbitrary code. Affected component: CX-Positi...

7.8CVSS8AI score0.0138EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/01 10:17 p.m.29 views

CVE-2022-25959 Rockwell Automation Studio 5000 Logix Designer Improper Restriction of Operations within the Bounds of a Memory Buffer

Omron CX-Position versions 2.5.3 and prior is vulnerable to memory corruption while processing a specific project file, which may allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.0138EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/04/01 12:0 a.m.8 views

PT-2022-5876 · Omron · Omron Cx-Position

Name of the Vulnerable Software and Affected Versions: Omron CX-Position versions 2.5.3 and prior Description: The issue is related to an out-of-bounds write in memory, which can be exploited to execute arbitrary code. This occurs while processing a specific project file. Recommendations: For Omr...

7.8CVSS7.7AI score0.01409EPSS
Exploits0References6
CNVD
CNVD
added 2022/03/31 12:0 a.m.22 views

Omron CX-Position Buffer Overflow Vulnerability

Omron CX-Position is a position control software from Omron Corporation of Japan. Simplifies all aspects of position control, from creating/editing data used in a position control unit NC unit to online communication and monitoring operations.Omron CX-Position suffers from a buffer overflow...

6.8CVSS8AI score0.01985EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/29 12:0 a.m.7 views

PT-2022-5668 · Omron · Omron Cx-Position

Name of the Vulnerable Software and Affected Versions: Omron CX-Position versions 2.5.3 and prior Description: The issue is related to memory corruption that occurs when processing a specific project file, potentially allowing an attacker to execute arbitrary code. This is due to a buffer overflo...

7.8CVSS8AI score0.0138EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.6 views

Omron CX-Position 资源管理错误漏洞

Omron CX-Position is a position control software from Omron Japan. It simplifies all aspects of position control, from creating/editing data used in position control units NC units to online communication and monitoring operations. Omron CX-Position suffers from a resource management error...

7.8CVSS7.8AI score0.01409EPSS
Exploits0References7
Rows per page
Query Builder