Vulnerability · Published Oct 19, 2021 · Assigned by jpcert
CVE-2021-20836
Medium 6.5
In plain English
A medium-severity security flaw in OMRON CX-Supervisor from OMRON Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)0.8%top 43.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and/or arbitrary code execution by opening a specially crafted SCS project files.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OMRON Corporation | OMRON CX-Supervisor | v4.0.0.13 and v4.0.0.16 |
References
- https://www.myomron.com/index.php?action=kb&article=1692 x_refsource_MISC
- https://jvn.jp/en/vu/JVNVU90041391/index.html x_refsource_MISC