PT-2018-14259

CVE-2018-17907

Published

2018-10-17

Updated

2019-10-09

Description by

CVSS 2.0

4.3

Medium

MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.4.1.0 and prior

Description The issue allows an attacker to force the application to read a value outside of an array by tampering with the value of an offset when processing project files. This can lead to information disclosure.

Recommendations For Omron CX-Supervisor versions 3.4.1.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor