Summary
Successful exploitation of these vulnerabilities could allow remote code execution.
Vulnerabilities 7
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow.
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when C…
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerabilit…
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow.
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor pars…
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability.
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untr…
Revision history
-
#2
ICSA-18-072-01 OMRON CX-Supervisor (Update A)
-
#1
ICSA-18-072-01 Omron CX-Supervisor
References
-
ICS Advisory ICSA-18-072-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-072-01
-
Recommended Practices
https://www.myomron.com/index.php?action=kb&article=1707
-
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-18-072-01