Omron CX-Supervisor

An attacker with network access could gain complete control of the CX-Supervisor workstation, potentially altering process control setpoints, stopping operations, or accessing sensitive facility data across the entire industrial control system it manages.

This affects organizations running Omron CX-Supervisor for industrial process monitoring and control, including water utilities, electric utilities, manufacturing plants, and any facility using Omron automation equipment. The vulnerability affects engineering workstations and control system servers that manage PLCs, drives, and other field devices.

An attacker on the network sends a crafted request to CX-Supervisor. With no authentication required, the vulnerability allows the attacker to execute code on the workstation. From there, the attacker can modify system configurations, view process data, or disrupt operations across connected devices.