Vulnerabilities > CVE-2022-26419 - Out-of-bounds Write vulnerability in Omron Cx-Position 2.5.3
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Common Weakness Enumeration (CWE)
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-02
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-02
- https://www.zerodayinitiative.com/advisories/ZDI-22-575/
- https://www.zerodayinitiative.com/advisories/ZDI-22-575/
- https://www.zerodayinitiative.com/advisories/ZDI-22-576/
- https://www.zerodayinitiative.com/advisories/ZDI-22-576/
- https://www.zerodayinitiative.com/advisories/ZDI-22-579/
- https://www.zerodayinitiative.com/advisories/ZDI-22-579/
- https://www.zerodayinitiative.com/advisories/ZDI-22-580/
- https://www.zerodayinitiative.com/advisories/ZDI-22-580/