high7.8
CVE-2020-27257
This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-conf…
Impact
This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Omron | Cx-One | through 4.60 |
| Omron | Cx-Position | through 2.52 |
| Omron | Cx-Protocol | through 2.02 |
| Omron | Cx-Server | through 5.0.28 |