CVE-2023-3718

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker ...

Command injection

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker ...

CVE-2023-3718 Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker ...

CVE-2023-3718 Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface

An authenticated command injection vulnerability exists in the AOS-CX command line interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands on the underlying operating system as a privileged user on the affected switch. This allows an attacker ...

CVE-2023-3718

CVE-2023-3718 is an authenticated command injection vulnerability in Aruba AOS-CX CLI that allows an attacker with valid credentials to execute arbitrary commands as a privileged user on the device, potentially fully compromising the underlying OS. The available documents confirm the vulnerabilit...

PT-2023-25820 · Aruba · Aos-Cx

Name of the Vulnerable Software and Affected Versions: AOS-CX affected versions not specified Description: An authenticated command injection issue exists in the command line interface, allowing successful exploitation to execute arbitrary commands on the underlying operating system as a privileg...

Omron CX-One Resource Management Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The product includes inverters, temperature controllers, and PLC programming software. A security vulnerability exists in Omron CX-One that stems from the presence of a Use-after-Free vulnerability, which could lead to information disclosure...

PT-2023-5305 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: CX-Programmer Included in CX-One CXONE-ALD-V4 versions 9.80 and earlier Description: An out-of-bounds read issue exists, which may allow information disclosure and/or arbitrary code execution when a user opens a specially crafted CXP file. Th...

PT-2023-5304 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: CX-Programmer Included in CX-One CXONE-ALD-V4 versions 9.80 and earlier Description: A heap-based buffer overflow issue exists, which can be exploited by having a user open a specially crafted CXP file. This may lead to information disclosure...

Omron CX-One Buffer Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The product includes inverters, temperature controllers, and PLC programming software. A security vulnerability exists in Omron CX-One that stems from an out-of-bounds read vulnerability that could lead to information disclosure or arbitrary...

Omron CX-One Buffer Error Vulnerability

Omron CX-One is an integrated toolkit from Omron Japan. The product includes inverters, temperature controllers, and PLC programming software. Omron CX-One has a security vulnerability that originates from the presence of a heap buffer overflow vulnerability. By allowing a user to open a speciall...

The vulnerability of the tool for configuring and maintaining Omron CX-Drive devices lies in the fact that the output operation goes beyond the buffer in memory, allowing a hacker to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability of the tool for configuring and maintaining Omron CX-Drives lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain unauthorized access to protected information using a specially created...

CVE-2023-27385

Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be disclosed...

CVE-2023-27385

Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be disclosed...

Heap overflow

Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be disclosed...

CVE-2023-27385

Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be disclosed...

CVE-2023-27385

CVE-2023-27385 concerns Omron CX-Drive. Affected: CX-Drive versions V3.01 and earlier. Vulnerability: heap-based buffer overflow (CWE-122) in CX-Drive when a user opens a specially crafted SDD file, potentially allowing arbitrary code execution and/or information disclosure. Root cause: heap over...

CVE-2023-27385

Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be disclosed...

Malicious code in omron_cx_supervisor_v3_1_rar_xvak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b294a26ade5c6fcdd59d4e3fe833a7f814dbbaa22c47ea9aaab7039f784750f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Heap-based buffer overflow vulnerability in OMRON CX-Drive

Overview CX-Drive provided by OMRON Corporation contains a heap-based buffer overflow vulnerability CWE-122, CVE-2023-27385. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By having a user open a specially crafted SDD file, arbitrary code...