CVE-2018-7530
mediumPriorität · verfolgen · 31EPSS 0.003 · 26. PerzentilEUUSEPSS · bewertet 2026-10-27
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may allow the pointer to call an incorrect object resulting in an access of resource using incompatible type condition.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenCX-FLnetcisa_csaf_ot
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service.
- BehobenCX-Onecisa_csaf_ot
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service.
- BehobenCX-Programmercisa_csaf_ot
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service.
- BehobenCX-Protocolcisa_csaf_ot
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service.
- BehobenCX-Servercisa_csaf_ot
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service.
- BehobenNetwork Configuratorcisa_csaf_ot
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service.
- BehobenSwitch Box Utilitycisa_csaf_ot
Omron has released an updated version of CX-One to address the reported vulnerabilities. These releases are available through the CX-One auto-update service.
- MitigationCX-FLnetcisa_csaf_ot
CX-FLnet version 1.10,
- MitigationCX-Onecisa_csaf_ot
CX-FLnet version 1.10,
- MitigationCX-Programmercisa_csaf_ot
CX-FLnet version 1.10,
- MitigationCX-Protocolcisa_csaf_ot
CX-FLnet version 1.10,
- MitigationCX-Servercisa_csaf_ot
CX-FLnet version 1.10,
- MitigationNetwork Configuratorcisa_csaf_ot
CX-FLnet version 1.10,
- MitigationSwitch Box Utilitycisa_csaf_ot
CX-FLnet version 1.10,
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 4.6–7.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (22)
Betroffene Produkte und Versionsbereiche.
- ICS-CERT Omron CX-One≤ The following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior.enisa_euvdEU
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSA-18-100-02Omron CX-One2018-04-10icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow remote code execution.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (3)
Externe Belege — Patches, Meldungen, Analysen.
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan