CVE-2021-27413

CVE-2021-27413 (Omron CX-One) affects CX-One up to v4.60 and CX-Server up to v5.0.29.0. A flaw in parsing NCI files within the CX-Position component causes a stack-based buffer overflow, enabling arbitrary code execution. ZDI describes remote code execution with attacker-controlled data in NCI pa...

Omron CX-One

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-One Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may allow arbitrary code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The...