← Back

CVE-2021-20836

nvd nist
Published: Oct 19, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Exploitability: 0.6 / Impact: 5.9
Source: NVD

Description

Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and/or arbitrary code execution by opening a specially crafted SCS project files.

Affected (2)

Products: Omron: Cx Supervisor
Omron
1 product
Cx Supervisor
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Omron
Cx Supervisor
Version 4.0.0.13
Cx Supervisor
Version 4.0.0.16

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.

References (4)

Source: vultures@jpcert.or.jp
Release NotesThird Party Advisory
Source: vultures@jpcert.or.jp
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.