PT-2021-1696

CVE-2020-27261

·

Published

2021-01-08

·

Updated

2021-02-11

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Omron CX-One versions 4.60 and prior
Description The issue is related to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code. This is a result of a vulnerability in the Omron CX-One software package, specifically affecting the CX-Position, CX-Protocol, and CX-Server components.
Recommendations For Omron CX-One versions 4.60 and prior, update to a version later than 4.60 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable components until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ZDI-21-183
ZDI-21-185
Found an issue in the description? Have something to add? Feel free to write us 👾