Lucene search

CVE-2018-8834

🗓️ 17 Apr 2018 19:00:29Reported by icscertType

CVE-2018-8834: Omron CX-One before 4.42 allows heap-based buffer overflow via malformed project files

Reporter	Title	Published	Views	Family All 10
Check Point Advisories	OMRON CX-One CX-FLnet Version and Node Name Heap-based Buffer Overflow (CVE-2018-8834)	14 May 201800:00	–	checkpoint_advisories
Check Point Advisories	OMRON CX-One CX-FLnet Type Heap-based Buffer Overflow (CVE-2018-8834)	7 Oct 201800:00	–	checkpoint_advisories
NVD	CVE-2018-8834	17 Apr 201819:29	–	nvd
Zero Day Initiative	OMRON CX-One CX-FLnet FLN File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability	11 Apr 201800:00	–	zdi
Zero Day Initiative	OMRON CX-One Network Configurator Uz01Eip21 Heap-based Buffer Overflow Remote Code Execution Vulnerability	11 Apr 201800:00	–	zdi
Zero Day Initiative	OMRON CX-One CX-FLnet Version Heap-based Buffer Overflow Remote Code Execution Vulnerability	11 Apr 201800:00	–	zdi
Zero Day Initiative	OMRON CX-One CX-FLnet Node Name Heap-based Buffer Overflow Remote Code Execution Vulnerability	11 Apr 201800:00	–	zdi
Cvelist	CVE-2018-8834	17 Apr 201819:00	–	cvelist
Prion	Heap overflow	17 Apr 201819:29	–	prion
ICS	Omron CX-One	10 Apr 201800:00	–	ics

Nvd

Node

omron cx-flnetRange≤1.00

omron cx-oneRange≤4.42

omron cx-programmerRange≤9.65

omron cx-protocolRange≤1.992

omron cx-serverRange≤5.0.22

omron network_configuratorRange≤3.63

omron switch_box_utilityRange≤1.68

[
  {
    "product": "Omron CX-One",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "The following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior."
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-100-02

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Apr 2018 19:29Current

7.5High risk

Vulners AI Score7.5

CVSS24.6

CVSS37.8

EPSS0.00113