CVE-2021-20836
published 2021-10-19CVE-2021-20836: Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure…
PriorityP429medium6.5CVSS 3.1
AVLACLPRHUIRSUCHIHAH
EPSS
0.78%
51.3th percentile
Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and/or arbitrary code execution by opening a specially crafted SCS project files.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| omron | cx-supervisor | — | — |
| omron | cx-supervisor | — | — |
| omron_corporation | omron_cx-supervisor | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.0MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-10-19
Published