QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-27257

Back to search

CVE-2020-27257

Published: Feb 9, 2021

Modified: Sep 17, 2024

PUBLISHED

Description

This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices.

VendorProductVersions

Omron

CX-One

affected
unspecified - <= 4.60

Omron

CX-Protocol

affected
unspecified - <= 2.02

Omron

CX-Server

affected
unspecified - <= 5.0.28

Omron

CX-Position

affected
unspecified - <= 2.52

Weaknesses (CWE)

CWE-843

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now