PT-2018-18130 · Omron · Cx-Supervisor

Esteban Ruiz + 2 · Publicado 2018-03-21 · Atualizado 2019-10-09 · CVE-2018-7525

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.30 and prior

Description The issue is related to the processing of a malformed packet by a certain executable, which may cause an untrusted pointer dereference. This could potentially lead to remote code execution.

Recommendations For Omron CX-Supervisor versions 3.30 and prior, consider updating to a version later than 3.30 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific issue.

Correção

NULL Pointer Dereference

Untrusted Pointer Dereference

Enumeração de Fraquezas

CWE-476

CWE-822

Identificadores relacionados

CVE-2018-7525

ZDI-18-260

Produtos afetados

Cx-Supervisor

Referências · 5

• http://securityfocus.com/bid/103394 · Nota
• https://osv.dev/vulnerability/CVE-2018-7525 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7525 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-18-260 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-18-072-01 · Nota