Stack overflow

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow...

Heap overflow

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow...

CVE-2018-7523

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability...

CVE-2018-7521

In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file...

CVE-2018-7513

OMRON CX-Supervisor vulnerability CVE-2018-7513: A stack-based buffer overflow in parsing malformed SCS project files affects CX-Supervisor 3.30 and earlier. The ZDI advisory indicates remote code execution is possible, with exploitation requiring user interaction (target must visit a malicious p...

CVE-2018-7515

OMRON CX-Supervisor CVE-2018-7515 affects CX-Supervisor, versions 3.30 and earlier. The flaw is an uninitialized pointer that can be triggered during parsing of malformed SCS project files, allowing remote code execution under the process context. ZDI advisories confirm remote code execution via ...

CVE-2018-7521

CVE-2018-7521 concerns Omron CX-Supervisor (versions 3.30 and earlier) with a use-after-free in the parsing/processing of project files (SCS/SCS-like). The ZDI advisories describe multiple use-after-free conditions in parsing various CX-Supervisor project/file formats that allow remote attackers ...

CVE-2018-7523

CVE-2018-7523 affects Omron CX-Supervisor (SCS) parsing of project files, causing a double-free vulnerability. The ZDI advisory confirms remote code execution when a crafted project file is parsed, with user interaction required (visit a malicious page or open a malicious file). Affected versions...

CVE-2018-7517

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability...

CVE-2018-7513

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow...

CVE-2018-7517

CVE-2018-7517 relates to Omron CX-Supervisor, where parsing malformed SCS project files can trigger an out-of-bounds write in the file parsing code (affecting CX-Supervisor versions 3.30 and prior; ICS update notes 3.40 and prior). The vulnerability potentially enables remote code execution when ...

CVE-2018-7519

CVE-2018-7519 affects Omron CX-Supervisor, with vulnerable heap-based overflow in the SCS project-file parsing. The flaw exists in CX-Supervisor versions 3.30 and earlier; the ZDI advisory confirms remote code execution is possible, requiring user interaction (the target must open a malicious fil...

CVE-2018-7525

CVE-2018-7525 affects Omron CX-Supervisor up to version 3.30. The issue is an untrusted pointer dereference triggered when parsing malformed input (CDM files) or processing a malformed packet by a specific executable, as described in the connected ZDI advisory. The vulnerability could allow arbit...

CVE-2018-7519

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow...

CVE-2018-7515

In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets...

CVE-2018-7525

In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability...

PT-2018-18118

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.30 and prior Description The issue arises from parsing malformed project files, which may cause a stack-based buffer overflow, potentially leading to remote code execution. Recommendations For Omron CX-Supervisor...

CVE-2018-7513: Stack-based Buffer Overflow

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow...

CVE-2018-7521: Use After Free

In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file...

PT-2018-18130

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.30 and prior Description The issue is related to the processing of a malformed packet by a certain executable, which may cause an untrusted pointer dereference. This could potentially lead to remote code executio...