PT-2018-18126 · Omron · Cx-Supervisor

Esteban Ruiz

+2

·

Publicado

2018-03-21

·

Atualizado

2019-10-09

·

CVE-2018-7521

CVSS v3.1

5.3

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.30 and prior
Description The issue arises when Omron CX-Supervisor parses a specially crafted project file, leading to use after free vulnerabilities that can be exploited for remote code execution.
Recommendations For Omron CX-Supervisor versions 3.30 and prior, consider restricting the parsing of project files from untrusted sources until a patch is available. As a temporary workaround, avoid using the SCS file parsing functionality in Omron CX-Supervisor until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2018-7521
ZDI-18-1351
ZDI-18-1352
ZDI-18-1353
ZDI-18-1354
ZDI-18-251
ZDI-18-255
ZDI-18-257
ZDI-18-258
ZDI-18-259

Produtos afetados

Cx-Supervisor