Omron CX-Supervisor (Update A)
Successful exploitation of these vulnerabilities could result in a denial-of-service condition, and/or allow an attacker to achieve code execution with privileges within the context of the application.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-19020US | medium5.0 | — | ||
When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an ar… | ||||
| CVE-2018-19018US | high7.3 | — | ||
An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files. An attacker could use a spec… | ||||
| CVE-2018-19015US | high7.3 | — | ||
An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file. An attac… | ||||
| CVE-2018-19019US | high7.3 | — | ||
A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An attacker could use a specially crafted project file to exploit an… | ||||
| CVE-2018-19017US | high8.8 | — | ||
Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the application fails to check if it is refer… | ||||
| CVE-2018-19013US | medium5.0 | — | ||
An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file. | ||||
| CVE-2018-19011US | high8.8 | — | ||
CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the appl… | ||||
references
External citations — patches, advisories, analysis.
remediations (7)
- FixedCX-Supervisor
Omron has released Version 3.5.0.11 of CX-Supervisor to address the reported vulnerabilities. To be protected, development projects must be upgraded and saved in the new format, then rebuilt in the latest 3.5.0.11 format.
https://www.myomron.com/index.php?action=kb&article=1711 - FixedCX-Supervisor
Omron has released Version 3.5.0.11 of CX-Supervisor to address the reported vulnerabilities. To be protected, development projects must be upgraded and saved in the new format, then rebuilt in the latest 3.5.0.11 format.
https://www.myomron.com/index.php?action=kb&article=1711 - FixedCX-Supervisor
Omron has released Version 3.5.0.11 of CX-Supervisor to address the reported vulnerabilities. To be protected, development projects must be upgraded and saved in the new format, then rebuilt in the latest 3.5.0.11 format.
https://www.myomron.com/index.php?action=kb&article=1711 - FixedCX-Supervisor
Omron has released Version 3.5.0.11 of CX-Supervisor to address the reported vulnerabilities. To be protected, development projects must be upgraded and saved in the new format, then rebuilt in the latest 3.5.0.11 format.
https://www.myomron.com/index.php?action=kb&article=1711 - FixedCX-Supervisor
Omron has released Version 3.5.0.11 of CX-Supervisor to address the reported vulnerabilities. To be protected, development projects must be upgraded and saved in the new format, then rebuilt in the latest 3.5.0.11 format.
https://www.myomron.com/index.php?action=kb&article=1711 - FixedCX-Supervisor
Omron has released Version 3.5.0.11 of CX-Supervisor to address the reported vulnerabilities. To be protected, development projects must be upgraded and saved in the new format, then rebuilt in the latest 3.5.0.11 format.
https://www.myomron.com/index.php?action=kb&article=1711 - FixedCX-Supervisor
Omron has released Version 3.5.0.11 of CX-Supervisor to address the reported vulnerabilities. To be protected, development projects must be upgraded and saved in the new format, then rebuilt in the latest 3.5.0.11 format.
https://www.myomron.com/index.php?action=kb&article=1711
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan