Use After Free Vulnerability in Omron CX-Supervisor Software
CVE-2018-7521

5.3MEDIUM

Key Information:

Vendor

Ics-cert

Status
Omron Cx-supervisor
Vendor
CVE Published:
21 March 2018

What is CVE-2018-7521?

In Omron's CX-Supervisor software, versions up to 3.30 contain a use after free vulnerability that can be exploited through the manipulation of specially crafted project files. This flaw allows attackers to potentially execute arbitrary code or cause a denial of service, jeopardizing system integrity and availability.

Affected Version(s)

Omron CX-Supervisor Version 3.30 and prior

References

http://www.securityfocus.com/bid/103394
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-18-072-01
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.