description: Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
problem types: ACCESS OF RESOURCE USING INCOMPATIBLE TYPE ('TYPE CONFUSION') CWE-843
affected:
{
product: CX-Protocol within CX-One
vendor: Omron
versions:
status: affected, version: CX-One Versions 4.50 and prior, including the following applications: CX-Protocol Versions 2.0 and prior
}