PT-2018-14259

CVE-2018-17907

Publicado

2018-10-17

Atualizado

2019-10-09

Descrição por

CVSS 2.0

4.3

Média

MétricasAV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.4.1.0 and prior

Description The issue allows an attacker to force the application to read a value outside of an array by tampering with the value of an offset when processing project files. This can lead to information disclosure.

Recommendations For Omron CX-Supervisor versions 3.4.1.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impactos

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor