ICSA-18-290-01

icsaUScisa_csaf_ot

Omron CX-Supervisor (Update A)

view advisory published 2018-10-17

Successful exploitation of these vulnerabilities could allow an attacker to execute code under the context of the application, corrupt objects, and force the application to read a value outside of an array.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2018-17913UShigh7.8—
A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to execute code in the context of…
CVE-2018-17909UShigh7.8—
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to ex…
CVE-2018-17907USlow3.3—
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value out…
CVE-2018-17905UShigh7.8—
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within a specific object.
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan