Description (CNA)
This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Omron / CX-One | affected unspecified through 4.60 |
| Omron / CX-Protocol | affected unspecified through 2.02 |
| Omron / CX-Server | affected unspecified through 5.0.28 |
| Omron / CX-Position | affected unspecified through 2.52 |
CWE
CWE-843
References
- https://us-cert.cisa.gov/ics/advisories/icsa-21-007-02
- https://www.zerodayinitiative.com/advisories/ZDI-21-184/
ADP enrichment
No English description supplied.