Vulnerability in Ics-Cert Omron Cx-One
CVE-2018-7530
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may allow the pointer to call an incorrect object resulting in an access of resource using incompatible type condition.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (23.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 23rd percentile — 23.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: -0.000
Affected products
- Ics-Cert Omron Cx-One — versions The following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior.
- Omron Cx-Flnet
- Omron Cx-One
- Omron Cx-Programmer
- Omron Cx-Protocol
- Omron Cx-Server
- Omron Network Configurator
- Omron Switch Box Utility
Weakness classification (CWE)
References
- ics-cert.us-cert.gov/advisories/ICSA-18-100-02 (US Government Resource, Third Party Advisory)
Frequently asked questions
- What is CVE-2018-7530?
- CVE-2018-7530 is a high-severity vulnerability in Ics-Cert Omron Cx-One, classified under Access of Resource Using Incompatible Type (Type Confusion). CVSS score: 7.8/10. Published 2018-04-17.
- How severe is CVE-2018-7530?
- High severity. CVSS v3 base score is 7.8 out of 10.