ICSA-18-290-01

icsaUScisa_csaf_ot

Omron CX-Supervisor (Update A)

Advisory ansehen veröffentlicht 2018-10-17

Successful exploitation of these vulnerabilities could allow an attacker to execute code under the context of the application, corrupt objects, and force the application to read a value outside of an array.

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2018-17913UShigh7.8—
A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to execute code in the context of…
CVE-2018-17909UShigh7.8—
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to ex…
CVE-2018-17907USlow3.3—
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value out…
CVE-2018-17905UShigh7.8—
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within a specific object.
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (4)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan