CVE-2021-27413: Omron CX-One CX-Position NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
First published: Thu May 13 2021(Updated: )
Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Omron CX-One | <=4.60 | |
| Omron Cx-server | <=5.0.29 | |
| Omron CX-One | ||
| Omron CX-One Versions 4.60 and prior, including the following applications: CX-Server Versions 5.0.29.0 and prior | ||
| Omron CX-Server Versions 5.0.29.0 and prior |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2021-27413.
What is the severity level of CVE-2021-27413?
The severity level of CVE-2021-27413 is high with a score of 7.8.
Which software versions are affected by CVE-2021-27413?
Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are affected by CVE-2021-27413.
What is the impact of CVE-2021-27413?
CVE-2021-27413 allows an attacker to execute arbitrary code due to a stack-based buffer overflow.
Are there any references available for CVE-2021-27413?
Yes, you can find references for CVE-2021-27413 at the following links: 1. [US-CERT Advisory](https://us-cert.cisa.gov/ics/advisories/icsa-21-131-01) 2. [Zero Day Initiative Advisory](https://www.zerodayinitiative.com/advisories/ZDI-21-588/)
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-588
- alias/ZDI-CAN-11845
- alias/CVE-2021-27413
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/event
- agent/tags
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup-request
- vendor/omron
- canonical/omron cx-one
- version/omron cx-one/4.60
- canonical/omron cx-server
- version/omron cx-server/5.0.29
- canonical/omron cx-one versions 4.60 and prior, including the following applications: cx-server versions 5.0.29.0 and prior
- canonical/omron cx-server versions 5.0.29.0 and prior