This vulnerability allows local attackers to execute arbitrary code due to the lack of proper validation of user-supplied data, which can result in a type-confusion condition in the Omron CX-One Version 4.60 and prior devices.

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-27257
• https://us-cert.cisa.gov/ics/advisories/icsa-21-007-02
• https://www.zerodayinitiative.com/advisories/ZDI-21-184/