ICSA-18-072-01

icsaUScisa_csaf_ot

Omron CX-Supervisor (Update A)

view advisory published 2018-03-13

Successful exploitation of these vulnerabilities could allow remote code execution.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2018-7525USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability.
CVE-2018-7523USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability.
CVE-2018-7521USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file.
CVE-2018-7519USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow.
CVE-2018-7517USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability.
CVE-2018-7515USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when par…
CVE-2018-7513USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow.
02

references

External citations — patches, advisories, analysis.

03

remediations (7)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan