Parsing malformed project files in Omron CX-One versions 4.42 and...

7.8 CVSS

Vulnerability Description

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may allow the pointer to call an incorrect object resulting in an access of resource using incompatible type condition.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-7530

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-100-02

More from ICS-CERT

View All →

CVE-2019-6565

Moxa IKS and EDS fails to properly validate user input,...

Medium 6.1

CVE-2019-6563

Moxa IKS and EDS generate a predictable cookie calculated with...

Critical 9.8

CVE-2019-6561

Cross-site request forgery has been identified in Moxa IKS and...

High 8.8

CVE-2019-6559

Moxa IKS and EDS allow remote authenticated users to cause...

Medium 6.5

CVE-2019-6557

Several buffer overflow vulnerabilities have been identified in Moxa IKS...

Critical 9.8

Affected Vendor

ICS-CERT

View all reports →

Affected Software

Omron CX-One

Vulnerable Versions:

The following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior.