CVE-2018-18993 Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior). When processing....
HighCVSS 7.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior). When processing project files, the application allows input data to exceed the buffer. An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| omron cx-one | <= 4.42 | No fix listed |
| omron cx-programmer | <= 9.66 | No fix listed |
| omron cx-server | <= 5.0.23 | No fix listed |
References
- 106106 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource