Vulnerability in Ics-Cert Omron Cx-One
CVE-2018-7530
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may allow the pointer to call an incorrect object resulting in an access of resource using incompatible type condition.
EPSS: 0.003 (25.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Ics-cert Omron Cx-one — versions The following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior.
- Omron Cx-flnet
- Omron Cx-one
- Omron Cx-programmer
- Omron Cx-protocol
- Omron Cx-server
- Omron Network_configurator
- Omron Switch_box_utility
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2018-7530?
- CVE-2018-7530 is a high-severity vulnerability in Ics-Cert Omron Cx-One, classified under Access of Resource Using Incompatible Type (Type Confusion). CVSS score: 7.8/10. Published 2018-04-17.
- How severe is CVE-2018-7530?
- High severity. CVSS v3 base score is 7.8 out of 10.