Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
omron vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv3
CVE-2023-27385
Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be disclosed.
Omron Cx-drive
8.8
CVSSv3
CVE-2018-19011
CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application.
Omron Cx-supervisor
5
CVSSv3
CVE-2018-19013
An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file.
Omron Cx-supervisor
8.8
CVSSv3
CVE-2018-19017
Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute c...
Omron Cx-supervisor
7.8
CVSSv3
CVE-2022-46282
Use after free vulnerability in CX-Drive V3.00 and previous versions allows a local malicious user to execute arbitrary code by having a user to open a specially crafted file,
Omron Cx-drive
NA
CVE-2015-0988
Omron CX-One CX-Programmer prior to 9.6 uses a reversible format for password storage in project source-code files, which makes it easier for local users to obtain sensitive information by reading a file.
Omron Cx-programmer
7.8
CVSSv3
CVE-2023-38746
Out-of-bounds read vulnerability/issue exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and previous versions. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.
Omron Cx-programmer
7.8
CVSSv3
CVE-2023-38747
Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and previous versions. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.
Omron Cx-programmer
7.8
CVSSv3
CVE-2023-38748
Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and previous versions. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.
Omron Cx-programmer
5.5
CVSSv3
CVE-2023-22322
Improper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX-Motion Pro 1.4.6.013 and previous versions. If a user opens a specially crafted project file created by an attacker, sensitive information in the file system where CX-Motion Pro is instal...
Omron Cx-motion Pro
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33228
CVE-2024-20361
log injection
bypass
CVE-2024-4985
CVE-2024-35223
CVE-2024-29849
CVE-2024-31893
IMAP
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
3
4
5
6
7
8
9
NEXT »