Omron Cx-Drive vulnerabilities

2 CVEs affecting Omron Cx-Drive, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-27385, published 2023-05-10.

More from Omron.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-46282, published 2022-12-21. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Use after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,
• CVE-2023-27385, published 2023-05-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be…