CVE-2021-20836: Omron Cx-Supervisor

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and/or arbitrary code execution by opening a specially crafted SCS project files.

Affected products

• Omron Cx-Supervisor: version 4.0.0.13 only; version 4.0.0.16 only

Published 2021-10-19. Last modified 2026-06-17.