Vulnerabilities (CVE)

Filtered by vendor Omron Subscribe
Filtered by product Cx-supervisor
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-20836 1 Omron 1 Cx-supervisor 2021-10-22 6.0 MEDIUM 6.5 MEDIUM
Out-of-bounds read vulnerability in CX-Supervisor v4.0.0.13 and v4.0.0.16 allows an attacker with administrative privileges to cause information disclosure and/or arbitrary code execution by opening a specially crafted SCS project files.
CVE-2018-7515 1 Omron 1 Cx-supervisor 2020-10-02 4.6 MEDIUM 5.3 MEDIUM
In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets.
CVE-2018-7513 1 Omron 1 Cx-supervisor 2020-10-02 4.6 MEDIUM 5.3 MEDIUM
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow.
CVE-2018-7519 1 Omron 1 Cx-supervisor 2020-10-02 4.6 MEDIUM 5.3 MEDIUM
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow.
CVE-2018-7517 1 Omron 1 Cx-supervisor 2019-10-09 4.6 MEDIUM 5.3 MEDIUM
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability.
CVE-2018-7521 1 Omron 1 Cx-supervisor 2019-10-09 4.6 MEDIUM 5.3 MEDIUM
In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file.
CVE-2018-7523 1 Omron 1 Cx-supervisor 2019-10-09 4.6 MEDIUM 5.3 MEDIUM
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability.
CVE-2018-7525 1 Omron 1 Cx-supervisor 2019-10-09 4.6 MEDIUM 5.3 MEDIUM
In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability.
CVE-2018-19013 1 Omron 1 Cx-supervisor 2019-10-09 4.9 MEDIUM 5.0 MEDIUM
An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file.
CVE-2018-19020 1 Omron 1 Cx-supervisor 2019-10-09 3.5 LOW 5.0 MEDIUM
When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array.