CVE-2021-27413

Name of the Vulnerable Software and Affected Versions Omron CX-One versions 4.60 and prior Omron CX-Server versions 5.0.29.0 and prior

Description The issue is a stack-based buffer overflow, which may allow an attacker to execute arbitrary code. This occurs during the parsing of NCI files in the CX-Position component of Omron CX-One.

Recommendations For Omron CX-One versions 4.60 and prior, update to a version later than 4.60 to resolve the issue. For Omron CX-Server versions 5.0.29.0 and prior, update to a version later than 5.0.29.0 to resolve the issue. As a temporary workaround, consider restricting access to the NCI file parsing functionality in the CX-Position component until a patch is available.