Omron CX-Supervisor ICSA-18-290-01 Multiple Security Vulnerabilities
BID:105691
CVE-2018-17905 | CVE-2018-17907 | CVE-2018-17909 | CVE-2018-17913 |Info
Omron CX-Supervisor ICSA-18-290-01 Multiple Security Vulnerabilities
| Bugtraq ID: | 105691 |
| Class: | Unknown |
| CVE: |
CVE-2018-17905 CVE-2018-17907 CVE-2018-17909 CVE-2018-17913 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Oct 17 2018 12:00AM |
| Updated: | Oct 17 2018 12:00AM |
| Credit: | Mat Powell of Trend Micro Zero Day Initiative, Ariele Caltabiano (kimiya) of 9SG Security Team, and b0nd @garage4hackers working with Trend Micro's Zero Day Initiative. |
| Vulnerable: |
Omron CX-Supervisor 3.4.1 |
| Not Vulnerable: |
Omron CX-Supervisor 3.4.2 |
Discussion
Omron CX-Supervisor ICSA-18-290-01 Multiple Security Vulnerabilities
Omron CX-Supervisor is prone to the following security vulnerabilities:
1. Multiple remote code-execution vulnerabilities
2. A memory-corruption vulnerability
3. An information-disclosure vulnerability
An attacker can exploit these issues to obtain sensitive information and execute arbitrary code in the context of the application, or cause a denial-of-service condition.
Omron CX-Supervisor is prone to the following security vulnerabilities:
1. Multiple remote code-execution vulnerabilities
2. A memory-corruption vulnerability
3. An information-disclosure vulnerability
An attacker can exploit these issues to obtain sensitive information and execute arbitrary code in the context of the application, or cause a denial-of-service condition.