CVE-2018-7515

In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets...

CVE-2018-7517

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability...

CVE-2018-7513

OMRON CX-Supervisor vulnerability CVE-2018-7513: A stack-based buffer overflow in parsing malformed SCS project files affects CX-Supervisor 3.30 and earlier. The ZDI advisory indicates remote code execution is possible, with exploitation requiring user interaction (target must visit a malicious p...

CVE-2018-7523

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability...

CVE-2018-7515

OMRON CX-Supervisor CVE-2018-7515 affects CX-Supervisor, versions 3.30 and earlier. The flaw is an uninitialized pointer that can be triggered during parsing of malformed SCS project files, allowing remote code execution under the process context. ZDI advisories confirm remote code execution via ...

Omron CX-Supervisor Free Use Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A free use vulnerability exists in Omron CX-Supervisor version 3.30, which can be exploited by an attacker to gain free use when CX Supervisor analyz...

Unspecified vulnerability in Omron CX-Supervisor (CNVD-2018-05320)

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A security vulnerability exists in Omron CX-Supervisor version 3.30, which can be exploited by an attacker to dereference untrusted pointers via an...

Unspecified Vulnerability in Omron CX-Supervisor

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A security vulnerability in Omron CX-Supervisor version 3.30 can be exploited by an attacker to execute arbitrary code when CX Supervisor indirectly...

Omron CX-Supervisor Heap Buffer Overflow Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A heap buffer overflow vulnerability exists in Omron CX-Supervisor version 3.30, where parsing an incorrectly formatted project file could result in ...

Omron CX-Supervisor Buffer Overflow Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A buffer overflow vulnerability exists in Omron CX-Supervisor 3.30 and earlier versions, where parsing an incorrectly formatted project file may resu...

Omron CX-Supervisor Out-of-Bounds Write Vulnerability

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. An out-of-bounds write vulnerability exists in Omron CX-Supervisor version 3.30, which allows remote attackers to construct a malicious file and tric...

Unspecified vulnerability in Omron CX-Supervisor (CNVD-2018-05319)

CX-Supervisor is a Miscellaneous Shareware software.CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. A security vulnerability in Omron CX-Supervisor version 3.30 allows remote attackers to construct malicious files that can be tricked into parsing an...

Omron CX-Supervisor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION : Low skill level to exploit Vendor : Omron Equipment : CX-Supervisor Vulnerabilities : Stack-based Buffer Overflow, Use After Free, Access of Uninitialized Pointer, Double Free, Out-of-bounds Write, Untrusted Pointer Dereference, Heap-based Buffer...

The vulnerability of the CX-Programmer and micro-programming software of PLC Omron CJ2M and Omron CJ2H lies in the reversibility of the password encoding method. This allows attackers to obtain access passwords to the controllers.

The vulnerability of the development environment “CX-Programmer,” which is part of the software suite “CX-One” designed for programming and configuring Omron PLCs, as well as Omron microcontrollers like CJ2M and CJ2H, is related to the reversibility of the password encoding method. Exploiting thi...

Coredy CX-E120 Repeater Multiple Vulnerabilities

Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in Coredy CX-E120 Repeater. The Coredy CX-E120 WiFi Range Extender is “a network device with multifunction, which can be using for increasing the distance of a WiFi network by boosting the existing WiFi signal an...

Authentication flaw

An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource locator URL...

CVE-2017-7919

The CVE-2017-7919 issue affects Newport XPS-Cx and XPS-Qx, where an attacker may bypass authentication by accessing a specific URL. This is classified as Improper Authentication with high impact (CVSS v3 base score 9.8) and is remotely exploitable with no user interaction. Affected products inclu...

Newport XPS-Cx, XPS-Qx

CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Newport Equipment: XPS-Cx, XPS-Qx Vulnerability: Improper Authentication AFFECTED PRODUCTS The following versions of XPS-Cx and XPS-Qx, a universal motion controller, are affected: XPS-Cx all versions, and XPS-Qx all...

CVE-2017-2110

The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...