ZDI-CAN-15353: ZDI-23-223: Omron CX-One CXP File Parsing Memory Corruption Remote Code Execution Vulnerability

Published Mar 7, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected Software

1 affected component

Omron CX-One

Event History

Mar 7, 2023

Advisory Published

06:00 AM

Data Sourced

06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-15353?

The severity of ZDI-CAN-15353 is high, as it allows remote code execution on affected installations of Omron CX-One.

How do I fix ZDI-CAN-15353?

To fix ZDI-CAN-15353, users should apply the latest security updates provided by Omron for CX-One software.

What software is affected by ZDI-CAN-15353?

ZDI-CAN-15353 affects installations of Omron CX-One software.

Is user interaction required to exploit ZDI-CAN-15353?

Yes, user interaction is required to exploit ZDI-CAN-15353, as the target must open a malicious file or visit a malicious page.

What are the impacts of ZDI-CAN-15353?

The impact of ZDI-CAN-15353 includes the potential for remote attackers to execute arbitrary code on the affected installations.