CVE-2023-27385

HIGH 7.8CVE-2023-27385 · Published 10/05/2023 · updated 17/06/2026

In short

CVE-2023-27385 is a HIGH (CVSS 7.8) vulnerability affecting cx-drive (omron).
Chance of exploitation in the next 30 days (EPSS): 0.23%, higher than 13.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cx-drive omron	`≤ 3.01`	No fix yet

Description

Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. By having a user open a specially crafted SDD file, arbitrary code may be executed and/or information may be disclosed.

References

jvn.jp/en/vu/JVNVU97372625 · Mitigation
ia.omron.com/product/vulnerability/OMSR-2023-004_en.pdf · Vendor Advisory

More vulnerabilities in cx-drive

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free