CVE-2018-7525

In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability...

CVE-2018-7523

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability...

CVE-2018-7523

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability...

Design/Logic Flaw

In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file...

Null pointer dereference

In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets...

Null pointer dereference

In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability...

Out-of-bounds

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability...

Double free

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability...

Stack overflow

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow...

Heap overflow

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow...

CVE-2018-7525

In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability...

CVE-2018-7515

In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets...

CVE-2018-7521

In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file...

CVE-2018-7513

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow...

CVE-2018-7517

CVE-2018-7517 relates to Omron CX-Supervisor, where parsing malformed SCS project files can trigger an out-of-bounds write in the file parsing code (affecting CX-Supervisor versions 3.30 and prior; ICS update notes 3.40 and prior). The vulnerability potentially enables remote code execution when ...

CVE-2018-7525

CVE-2018-7525 affects Omron CX-Supervisor up to version 3.30. The issue is an untrusted pointer dereference triggered when parsing malformed input (CDM files) or processing a malformed packet by a specific executable, as described in the connected ZDI advisory. The vulnerability could allow arbit...

CVE-2018-7515

OMRON CX-Supervisor CVE-2018-7515 affects CX-Supervisor, versions 3.30 and earlier. The flaw is an uninitialized pointer that can be triggered during parsing of malformed SCS project files, allowing remote code execution under the process context. ZDI advisories confirm remote code execution via ...

CVE-2018-7521

CVE-2018-7521 concerns Omron CX-Supervisor (versions 3.30 and earlier) with a use-after-free in the parsing/processing of project files (SCS/SCS-like). The ZDI advisories describe multiple use-after-free conditions in parsing various CX-Supervisor project/file formats that allow remote attackers ...

CVE-2018-7519

CVE-2018-7519 affects Omron CX-Supervisor, with vulnerable heap-based overflow in the SCS project-file parsing. The flaw exists in CX-Supervisor versions 3.30 and earlier; the ZDI advisory confirms remote code execution is possible, requiring user interaction (the target must open a malicious fil...

CVE-2018-7513

OMRON CX-Supervisor vulnerability CVE-2018-7513: A stack-based buffer overflow in parsing malformed SCS project files affects CX-Supervisor 3.30 and earlier. The ZDI advisory indicates remote code execution is possible, with exploitation requiring user interaction (target must visit a malicious p...