CVE-2018-8834
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may cause a heap-based buffer overflow.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2018-04-17
- Last modified
- 2024-09-16
- Weaknesses
- CWE-122, CWE-787
Affected products
- Omron Cx-one (Ics-cert)
- Cx-flnet (Omron)
- Cx-one (Omron)
- Cx-programmer (Omron)
- Cx-protocol (Omron)
- Cx-server (Omron)
- Network Configurator (Omron)
- Switch Box Utility (Omron)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-18-100-02
