Omron Vulnerabilities and Affected Products
Vulnerabilities associated with CX-Protocol.
Products
Clear product- CX-Position7 vulnerabilities
- CX-Programmer5 vulnerabilities
- CX-One4 vulnerabilities
- CX-Supervisor4 vulnerabilities
- CX-Protocol3 vulnerabilities
- CX-Server3 vulnerabilities
- CJ-series and CS-series CPU modules2 vulnerabilities
- NS102 vulnerabilities
- NS122 vulnerabilities
- NS152 vulnerabilities
- NS52 vulnerabilities
- NS82 vulnerabilities
- Sysmac Studio2 vulnerabilities
- CJ1M SYSMAC CJ-series1 vulnerability
- CJ1M SYSMAC CP-series1 vulnerability
- CJ1M SYSMAC CS-series1 vulnerability
- cj2h_cpu_unit1 vulnerability
- cj2m_cpu_unit1 vulnerability
- cs_cj_series_ethernet_ip_unit1 vulnerability
- CX-Programmer within CX-One1 vulnerability
- CX-Protocol within CX-One1 vulnerability
- nj101-9020_firmware1 vulnerability
- nj301-1200_firmware1 vulnerability
- nj501-r520_firmware1 vulnerability
- nx701-1600_firmware1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-27257HIGH | Omron CX-OneThis vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices. CWE-843Feb 9, 2021 | CVSS7.8v3.1 | EPSS1.78% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2020-27261HIGH | Omron CX-OneThe Omron CX-One Version 4.60 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code. | CVSS8.8v3.1 | EPSS7.61% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2020-27259HIGH | Omron CX-OneThe Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code. CWE-822Feb 9, 2021 | CVSS8.8v3.1 | EPSS2.67% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |