Skip to content
OpenAdvisories
High ICSA-19-017-01 7 CVEs

Omron CX-Supervisor (Update A)

Published Jan 17, 2019 · Updated Feb 7, 2019 · Revision 2

Vendor: Omron Product: CX-Supervisor

Summary

Successful exploitation of these vulnerabilities could result in a denial-of-service condition, and/or allow an attacker to achieve code execution with privileges within the context of the application.

Vulnerabilities 7

  • Unscored —
    CVE-2018-19011

    CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could …

    ICS-CERT CX-Supervisor
  • Unscored —
    CVE-2018-19013

    An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 …

    ICS-CERT CX-Supervisor
  • Unscored —
    CVE-2018-19015

    An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 …

    ICS-CERT CX-Supervisor
  • Unscored —
    CVE-2018-19017

    Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing…

    ICS-CERT CX-Supervisor
  • Unscored —
    CVE-2018-19018

    An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusio…

    ICS-CERT CX-Supervisor
  • Unscored —
    CVE-2018-19019

    A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An atta…

    ICS-CERT CX-Supervisor
  • Unscored —
    CVE-2018-19020

    When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attack…

    ICS-CERT CX-Supervisor

Revision history

  1. #2

    ICSA-19-017-01 Omron CX-Supervisor (Update A)

  2. #1

    ICSA-19-017-01 Omron CX-Supervisor

References