ICSA-18-072-01

icsaUScisa_csaf_ot

Omron CX-Supervisor (Update A)

Advisory ansehen veröffentlicht 2018-03-13

Successful exploitation of these vulnerabilities could allow remote code execution.

01

beschreibt (7)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2018-7525USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability.
CVE-2018-7523USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability.
CVE-2018-7521USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file.
CVE-2018-7519USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow.
CVE-2018-7517USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability.
CVE-2018-7515USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when par…
CVE-2018-7513USmedium5.3—
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (7)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan