HTTP: Omron CX-One CX-Position NCI File Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Omron CX-One. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.

Extended Description

Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.

Affected Products

Omron cx-server

References

CVE: CVE-2020-27261

URL: http://www.zerodayinitiative.com/advisories/ZDI-21-588/ http://www.zerodayinitiative.com/advisories/ZDI-21-183/ http://www.zerodayinitiative.com/advisories/ZDI-21-185/

Short Name

HTTP:OVERFLOW:OMRON-CXONE-BOF

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Omron CX-One CX-Position NCI File Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?