CVE-2018-7514

2018-04-1700:00:00

CWE-121

icscert

www.cve.org

7.7 High

AI Score

Confidence

High

0.258 Low

EPSS

Percentile

96.7%

JSON

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may cause a stack-based buffer overflow.

CNA Affected

[
  {
    "product": "Omron CX-One",
    "vendor": "ICS-CERT",
    "versions": [
      {
        "status": "affected",
        "version": "The following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior."
      }
    ]
  }
]