CVE-2020-27257CWE-843

CVE-2020-27257: vulnerability in Omron CX-One

Omron CX-One

Published · Updated

Follow this CVE+ Monitor CX-Position+ Monitor CX-One

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.9%
This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices.
Affected products
Omron · CX-OneOmron · CX-PositionOmron · CX-ProtocolOmron · CX-Server
Related CVEs — Omron CX-One

In the same product, most dangerous first.

CVE-2022-21137HIGHOmron CX-OneEPSS 9.3%CVE-2020-27261—Omron CX-OneEPSS 7.9%CVE-2020-27259—Omron CX-OneEPSS 2.8%CVE-2022-26419HIGHRockwell Automation Studio 5000 Logix Designer Code InjectionEPSS 2.1%CVE-2022-26022HIGHRockwell Automation Studio 5000 Logix Designer Out-of-Bounds WriteEPSS 1.5%CVE-2022-26417HIGHRockwell Automation Studio 5000 Logix Designer Use After FreeEPSS 1.5%