CVE-2023-20044

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A...

Design/Logic Flaw

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by persuading support to update settings which call the insecure script. A...

CVE-2023-20044

Cisco CX Cloud Agent contains a privilege-escalation vulnerability caused by insecure file permissions. An authenticated, local attacker could exploit settings persuaded by support to call insecure scripts, potentially taking full control of the affected device. Cisco has issued advisories and so...

CVE-2023-20043

A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An attacker could exploit this vulnerability by calling the script with sudo. A successful exploit could allow the attacker ...

CVE-2023-20043

The CVE-2023-20043 entry concerns Cisco CX Cloud Agent. Affected component: Cisco CX Cloud Agent. Root cause: insecure file permissions allowing a locally authenticated attacker to elevate privileges by executing a script with sudo, potentially gaining full control of the device. Documented impac...

CVE-2023-22366

CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution...

CVE-2023-22366

CX-Motion-MCH (Omron) versions 2.32 and earlier are affected by an uninitialized pointer vulnerability (CWE-824, CVE-2023-22366). The issue may allow information disclosure and arbitrary code execution when a user opens a specially crafted project file. Some sources indicate a fix is available in...

CVE-2023-22366

CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution...

Cisco CX Cloud Agent Privilege Escalation Vulnerabilities

Multiple vulnerabilities in Cisco CX Cloud Agent could allow an authenticated, local attacker to elevate privileges. These vulnerabilities are due to insecure file permissions. A successful exploit could allow an attacker to take complete control of the affected device. For more information about...

PT-2023-1103 · Cisco · Cisco Cx Cloud Agent

Name of the Vulnerable Software and Affected Versions: Cisco CX Cloud Agent affected versions not specified Description: A vulnerability in Cisco CX Cloud Agent could allow an authenticated, local attacker to elevate their privileges due to insecure file permissions. An attacker could exploit thi...

Omron CX-Motion-MCH 缓冲区错误漏洞

Omron CX-Motion-MCH is an advanced motion application programming and configuration software from Omron Corporation Japan. A security vulnerability exists in Omron CX-Motion-MCH versions prior to v2.32 that stems from the inclusion of an uninitialized pointer vulnerability...

PT-2023-1104 · Cisco · Cisco Cx Cloud Agent

Name of the Vulnerable Software and Affected Versions: Cisco CX Cloud Agent affected versions not specified Description: A vulnerability in Cisco CX Cloud Agent could allow an authenticated, local attacker to elevate their privileges due to insecure file permissions. An attacker could exploit thi...

Omron CX-Programmer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Omron Equipment: CX-Programmer Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could allow arbitrary code execution or loss of sensitive information if a user opens a...

CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

Design/Logic Flaw

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

CVE-2022-46282

Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,...

CVE-2022-46282

CVE-2022-46282 affects Omron CX-Drive, specifically versions 3.00 and earlier. The issue is a use-after-free vulnerability in CX-Drive that allows a local attacker to execute arbitrary code when a user opens a specially crafted file. The Red Hat/NVD/JVN and related records confirm the local-execu...

PT-2022-27797 · Cx-Drive · Cx-Drive

Name of the Vulnerable Software and Affected Versions: CX-Drive versions 3.00 and earlier Description: The issue allows a local attacker to execute arbitrary code by having a user open a specially crafted file. This is due to a use after free vulnerability. Recommendations: For CX-Drive versions...