CVE-2020-27257

Omron CX-One

EPSS 1.8%CWE-843

This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices.

Affected products

Omron · CX-One Omron · CX-Position Omron · CX-Protocol Omron · CX-Server

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-007-02 https://www.zerodayinitiative.com/advisories/ZDI-21-184/