ID
VAR-202203-1538
CVE
CVE-2022-26419
TITLE
Omron CX-One CX-Position NCI File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
Trust: 2.8
DESCRIPTION
Omron CX-Position (versions 2.5.3 and prior) is vulnerable to multiple stack-based buffer overflow conditions while parsing a specific project file, which may allow an attacker to locally execute arbitrary code. Omron CX-Position Is vulnerable to an out-of-bounds write.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of NCI files in the CX-Position module. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Omron CX-Position is a position control software of Japan Omron Company. Simplifies all aspects of position control, from creating/editing data used in position control units (NC units) to online communication and monitoring operations
Trust: 4.23
AFFECTED PRODUCTS
| vendor: | omron | model: | cx-one | scope: | - | version: | - | Trust: 2.8 |
| vendor: | omron | model: | cx-position | scope: | lte | version: | 2.5.3 | Trust: 1.0 |
| vendor: | オムロン株式会社 | model: | cx-position | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | オムロン株式会社 | model: | cx-position | scope: | lte | version: | 2.5.3 and earlier | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.1 |
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD Evaluation ] | Trust: 0.8 |
THREAT TYPE
local
Trust: 0.6
TYPE
buffer error
Trust: 0.6
PATCH
| title: | Omron has issued an update to correct this vulnerability. | url: | https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-02 | Trust: 2.8 |
| title: | top page | url: | https://www.fa.omron.co.jp/ | Trust: 0.8 |
| title: | Omron CX-Position Buffer error vulnerability fix | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=188369 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2022-26419 | Trust: 6.1 |
| db: | ICS CERT | id: | ICSA-22-088-02 | Trust: 2.5 |
| db: | ZDI | id: | ZDI-22-580 | Trust: 2.4 |
| db: | ZDI | id: | ZDI-22-579 | Trust: 2.4 |
| db: | ZDI | id: | ZDI-22-576 | Trust: 2.4 |
| db: | ZDI | id: | ZDI-22-575 | Trust: 2.4 |
| db: | JVN | id: | JVNVU96756124 | Trust: 0.8 |
| db: | JVNDB | id: | JVNDB-2022-001553 | Trust: 0.8 |
| db: | ZDI_CAN | id: | ZDI-CAN-14776 | Trust: 0.7 |
| db: | ZDI_CAN | id: | ZDI-CAN-14775 | Trust: 0.7 |
| db: | ZDI_CAN | id: | ZDI-CAN-14676 | Trust: 0.7 |
| db: | ZDI_CAN | id: | ZDI-CAN-14674 | Trust: 0.7 |
| db: | CNNVD | id: | CNNVD-202203-2487 | Trust: 0.7 |
| db: | CS-HELP | id: | SB2022033010 | Trust: 0.6 |
| db: | AUSCERT | id: | ESB-2022.1347 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-418116 | Trust: 0.1 |
REFERENCES
| url: | https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-02 | Trust: 5.3 |
| url: | https://www.zerodayinitiative.com/advisories/zdi-22-580/ | Trust: 2.3 |
| url: | https://www.zerodayinitiative.com/advisories/zdi-22-575/ | Trust: 1.7 |
| url: | https://www.zerodayinitiative.com/advisories/zdi-22-576/ | Trust: 1.7 |
| url: | https://www.zerodayinitiative.com/advisories/zdi-22-579/ | Trust: 1.7 |
| url: | http://jvn.jp/vu/jvnvu96756124/index.html | Trust: 0.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2022-26419 | Trust: 0.8 |
| url: | https://us-cert.cisa.gov/ics/advisories/icsa-22-088-02 | Trust: 0.6 |
| url: | https://www.cybersecurity-help.cz/vdb/sb2022033010 | Trust: 0.6 |
| url: | https://cxsecurity.com/cveshow/cve-2022-26419/ | Trust: 0.6 |
| url: | https://www.auscert.org.au/bulletins/esb-2022.1347 | Trust: 0.6 |
CREDITS
xina1i
Trust: 2.8
SOURCES
| db: | ZDI | id: | ZDI-22-580 |
| db: | ZDI | id: | ZDI-22-579 |
| db: | ZDI | id: | ZDI-22-576 |
| db: | ZDI | id: | ZDI-22-575 |
| db: | VULHUB | id: | VHN-418116 |
| db: | JVNDB | id: | JVNDB-2022-001553 |
| db: | CNNVD | id: | CNNVD-202203-2487 |
| db: | NVD | id: | CVE-2022-26419 |
LAST UPDATE DATE
2024-11-23T22:36:51.879000+00:00
SOURCES UPDATE DATE
| db: | ZDI | id: | ZDI-22-580 | date: | 2022-04-05T00:00:00 |
| db: | ZDI | id: | ZDI-22-579 | date: | 2022-04-05T00:00:00 |
| db: | ZDI | id: | ZDI-22-576 | date: | 2022-04-05T00:00:00 |
| db: | ZDI | id: | ZDI-22-575 | date: | 2022-04-05T00:00:00 |
| db: | VULHUB | id: | VHN-418116 | date: | 2022-04-08T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-001553 | date: | 2022-04-19T05:47:00 |
| db: | CNNVD | id: | CNNVD-202203-2487 | date: | 2022-04-11T00:00:00 |
| db: | NVD | id: | CVE-2022-26419 | date: | 2024-11-21T06:53:54.863 |
SOURCES RELEASE DATE
| db: | ZDI | id: | ZDI-22-580 | date: | 2022-04-05T00:00:00 |
| db: | ZDI | id: | ZDI-22-579 | date: | 2022-04-05T00:00:00 |
| db: | ZDI | id: | ZDI-22-576 | date: | 2022-04-05T00:00:00 |
| db: | ZDI | id: | ZDI-22-575 | date: | 2022-04-05T00:00:00 |
| db: | VULHUB | id: | VHN-418116 | date: | 2022-04-01T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-001553 | date: | 2022-04-19T00:00:00 |
| db: | CNNVD | id: | CNNVD-202203-2487 | date: | 2022-03-29T00:00:00 |
| db: | NVD | id: | CVE-2022-26419 | date: | 2022-04-01T23:15:14.647 |