CVE-2022-21137 HIGH

CVE-2022-21137: Omron CX-One

Vendor Omron

Product CX-One

Weakness CWE-121

Published January 14, 2022

Last update April 16, 2025

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Omron CX-One Versions 4.60 and prior are vulnerable to a stack-based buffer overflow while processing specific project files, which may allow an attacker to execute arbitrary code.

Key dates

02Disclosure timeline

January 14, 2022 CVE published

April 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-21137 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/121.html

Related vulnerabilities

04Related CVE

CVE-2025-9001 LemonOS HTTP Client main.cpp HTTPGet stack-based overflow CVE-2026-5525 Stack-Based Buffer Overflow in Notepad++ File Drop Handler leads to DoS CVE-2025-61856 CVE-2021-1209 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities CVE-2026-9430 Tenda F1202 GstDhcpSetSerof formGstDhcpSetSer stack-based overflow