Parsing malformed project files in Omron CX-One versions 4.42 and...

7.8 CVSS

Vulnerability Description

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may cause a heap-based buffer overflow.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8834

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-100-02

More from ICS-CERT

View All →

CVE-2019-6565

Moxa IKS and EDS fails to properly validate user input,...

Medium 6.1

CVE-2019-6563

Moxa IKS and EDS generate a predictable cookie calculated with...

Critical 9.8

CVE-2019-6561

Cross-site request forgery has been identified in Moxa IKS and...

High 8.8

CVE-2019-6559

Moxa IKS and EDS allow remote authenticated users to cause...

Medium 6.5

CVE-2019-6557

Several buffer overflow vulnerabilities have been identified in Moxa IKS...

Critical 9.8

Affected Vendor

ICS-CERT

View all reports →

Affected Software

Omron CX-One

Vulnerable Versions:

The following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior.