Lucene search
+L

1440 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/09 12:00 a.m.•6 views

CVE-2020-27257: Access of Resource Using Incompatible Type

This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices...

7.8CVSS6.5AI score0.01781EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/02/03 12:00 a.m.•10 views

Denial of Service Vulnerability in Omron CP1L-EM40DR-D

The Omron CP1L-EM40DR-D is a programmable logic controller from Omron Japan. A denial of service vulnerability exists in the Omron CP1L-EM40DR-D, which can be exploited by an attacker to cause a denial of service on the device...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/01/28 12:00 a.m.•16 views

The vulnerability of the software package for creating the CX-Position position control system, the software package for describing procedures for serial data exchange between standard CX-Protocol devices, and the device compatibility system between Omron CX-Servers included in the Omron CX-One software suite, allows a hacker to execute arbitrary code using a specially created NCI file.

The vulnerabilities of the software package for creating the CX-Position position control system, the software package for describing procedures for serial data exchange between standard CX-Protocol devices, and the device compatibility system between Omron CX-Servers included in the Omron CX-One...

10CVSS8AI score0.07612EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
•added 2021/01/28 12:00 a.m.•17 views

The vulnerability of the software package for creating the CX-Position position control system, the software package for describing procedures for serial data exchange between standard CX-Protocol devices, and the device compatibility system between Omron CX-Servers included in the Omron CX-One software suite, allows a hacker to execute arbitrary code.

The vulnerabilities of the software package for creating the CX-Position position control system, the software package for describing procedures for serial data exchange between standard CX-Protocol devices, and the device compatibility system between Omron CX-Servers included in the Omron CX-One...

10CVSS7.7AI score0.02669EPSS
SaveExploits0References3Affected Software4
Positive Technologies
Positive Technologies
•added 2021/01/08 12:00 a.m.•5 views

PT-2021-1697

Name of the Vulnerable Software and Affected Versions Omron CX-One versions 4.60 and prior Description The issue is related to the lack of pointer value validation before dereferencing, which may allow a remote attacker to execute arbitrary code by supplying a pointer to arbitrary memory location...

10CVSS6.8AI score0.02669EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2021/01/08 12:00 a.m.•2 views

PT-2021-1696

Name of the Vulnerable Software and Affected Versions Omron CX-One versions 4.60 and prior Description The issue is related to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code. This is a result of a vulnerability in the Omron CX-One software package,...

10CVSS6.7AI score0.07612EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2021/01/07 12:00 a.m.•23 views

Omron CX-One and CX-Protocol Buffer Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The products include inverters, temperature controllers, and PLC programming software, etc. CX-Protocol is one of the components used to create a serial communication protocol to communicate with standard serial devices. A buffer error...

7.8CVSS7.5AI score0.01781EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/01/07 12:00 a.m.•29 views

Omron CX-One and CX-Protocol Buffer Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The products include inverters, temperature controllers, and PLC programming software, etc. CX-Protocol is one of the components used to create a serial communication protocol to communicate with standard serial devices. A buffer error...

8.8CVSS7.4AI score0.07612EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/01/07 12:00 a.m.•22 views

Omron CX-One and CX-Protocol Security Vulnerabilities

Omron CX-One is an integrated toolkit from Omron Japan. The products include inverters, temperature controllers, and PLC programming software, etc. CX-Protocol is one of the components used to create a serial communication protocol to communicate with standard serial devices. A security...

8.8CVSS7.3AI score0.02669EPSS
SaveExploits0References5
ICS
ICS
•added 2021/01/07 12:00 a.m.•243 views

Omron CX-One

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Omron Equipment: CX-One Vulnerabilities: Untrusted Pointer Dereference, Stack-based Buffer Overflow, Type Confusion 2. RISK EVALUATION Successful exploitation of these vulnerabilities could crash the device being...

8.8CVSS9.2AI score0.07612EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/01/06 12:00 a.m.•11 views

Denial of Service Vulnerability in OMRON CJ1M-PA205C (CNVD-2021-03524)

OMRON CJ1M-PA205C is a controller product of Controllers series of OMRON Automation China Co. A denial of service vulnerability exists in the OMRON CJ1M-PA205C, which can be exploited by an attacker to cause a denial of service attack...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2021/01/06 12:00 a.m.•9 views

Denial of Service Vulnerability in OMRON CJ1M-PA205C

OMRON CJ1M-PA205C is a controller product of Controllers series of OMRON Automation China Co. A denial of service vulnerability exists in the OMRON CJ1M-PA205C, which can be exploited by an attacker to cause the device to go down...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2020/10/26 12:00 a.m.•8 views

Industrial Control Device Vulnerability in CJ2M-CPU11 at Omron Automation (China) Co.

The OMRON Group is a manufacturer of automation control and electronic equipment. A vulnerability exists in CJ2M-CPU11 of Omron Automation China Co. for industrial control devices. An attacker could exploit the vulnerability to cause control functions to stop, resulting in production interruption...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2020/09/23 12:00 a.m.•10 views

Denial of Service Vulnerability in Omron Small PLC Series CP1L

CP1L is Omron's compact PLC series, an all-in-one PLC with built-in pulse output, analog input/output, and serial communication functions. A denial of service vulnerability exists in the Omron compact PLC series CP1L, which can be exploited by an attacker to stop programs running on the device...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2020/09/23 12:00 a.m.•17 views

Denial of Service Vulnerability in Omron Small PLC Series CP1L (CNVD-2020-58493)

CP1L is Omron's compact PLC series, an all-in-one PLC with built-in pulse output, analog input/output, and serial communication functions. A denial of service vulnerability exists in Omron Small PLC Series CP1L, which can be exploited by attackers to cause a device connection to be interrupted...

6.7AI score
SaveExploits0
CNVD
CNVD
•added 2020/09/23 12:00 a.m.•13 views

Denial of Service Vulnerability in Omron Small PLC Series CP1L (CNVD-2020-58494)

CP1L is Omron's compact PLC series, an all-in-one PLC with built-in pulse output, analog input/output, and serial communication functions. A denial of service vulnerability exists in the Omron Compact PLC Series CP1L, which can be exploited by an attacker to erase logic files running inside the...

6.8AI score
SaveExploits0
NVD
NVD
•added 2020/03/05 9:15 p.m.•27 views

CVE-2020-6986

In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the PLC Ethernet module, which in turn causes a PLC service denied result...

7.8CVSS7.5AI score0.01562EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/05 9:15 p.m.•20 views

Design/Logic Flaw

In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the PLC Ethernet module, which in turn causes a PLC service denied result...

7.8CVSS7.5AI score0.01562EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/03/05 9:15 p.m.•8 views

CVE-2020-6986

In all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets within a short period, causing a service error on the PLC Ethernet module, which in turn causes a PLC service denied result...

7.8CVSS7.4AI score0.01562EPSS
SaveExploits0References2
CVE
CVE
•added 2020/03/05 8:05 p.m.•106 views

CVE-2020-6986

CVE-2020-6986 affects Omron PLC CJ Series (all versions). The vulnerability is described as Uncontrolled Resource Consumption (CWE-400) where an attacker can send a sequence of specific data packets in a short time, triggering a PLC Ethernet module error and resulting in a service-denied state. D...

7.8CVSS7.4AI score0.01562EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder