CVE-2022-26419

Name of the Vulnerable Software and Affected Versions Omron CX-Position versions 2.5.3 and prior

Description The issue is related to multiple stack-based buffer overflow conditions that occur while parsing a specific project file. This may allow an attacker to locally execute arbitrary code. The vulnerability is associated with the Omron CX-One software package, specifically the CX-Position component.

Recommendations For Omron CX-Position versions 2.5.3 and prior, consider disabling the project file parsing functionality until a patch is available. As a temporary workaround, restrict the use of specific project files that may trigger the buffer overflow condition. At the moment, there is no information about a newer version that contains a fix for this vulnerability.