Sign-up

ID

VAR-201803-2217


CVE

CVE-2018-7525


TITLE

OMRON CX-Supervisor Multiple vulnerabilities in

Trust: 0.8

sources: JVNDB: JVNDB-2018-001951

DESCRIPTION

In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability. Provided by OMRON Corporation CX-Supervisor Contains the following multiple vulnerabilities: * * Stack-based buffer overflow (CWE-121) - CVE-2018-7513 ∙ Stack-based buffer overflow may occur due to processing of specially crafted project files. * * Uninitialized pointer access (CWE-824) - CVE-2018-7515 There is a possibility of accessing an uninitialized pointer due to the processing of a specially crafted packet. * * Write outside memory boundary (CWE-787) - CVE-2018-7517 ∙ There is a possibility of writing outside the memory boundary due to processing of a specially crafted project file. * * Heap-based buffer overflow (CWE-122) - CVE-2018-7519 ∙ A heap-based buffer overflow may occur due to processing of a specially crafted project file. * * Freed memory used (CWE-416) - CVE-2018-7521 This is a vulnerability in the use of released memory due to processing of specially crafted project files. * * Memory double release (CWE-415) - CVE-2018-7523 This is a memory double release vulnerability caused by processing of specially crafted project files. * * Untrusted pointer reference (CWE-822) - CVE-2018-7525 There is a possibility of referring to untrusted pointers due to processing of specially crafted packets.A remote attacker could execute arbitrary code. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of CDM file. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to execute code under the context of the current process. CX-Supervisor is a Miscellaneous Shareware software. CX-Supervisor is dedicated to the design and operation of PC visualization and machine control. Omron CX-Supervisor is prone to the following security vulnerabilities: 1. A stack-based buffer-overflow vulnerability 2. A heap-based buffer-overflow vulnerability 3. Omron CX-Supervisor Versions 3.30 and prior are vulnerable; other versions may also be affected. Omron CX-Supervisor is a visual machine controller produced by Omron Corporation of Japan

Trust: 3.33

sources: NVD: CVE-2018-7525 // JVNDB: JVNDB-2018-001951 // ZDI: ZDI-18-260 // CNVD: CNVD-2018-05320 // BID: 103394 // IVD: e2e6acef-39ab-11e9-a9b9-000c29342cb1 // VULHUB: VHN-137557

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: e2e6acef-39ab-11e9-a9b9-000c29342cb1 // CNVD: CNVD-2018-05320

AFFECTED PRODUCTS

vendor:omronmodel:cx-supervisorscope:lteversion:3.30

Trust: 1.0

vendor:omronmodel:cx-supervisorscope:eqversion:3.30

Trust: 0.9

vendor:omronmodel:cx-supervisorscope:lteversion:version 3.30

Trust: 0.8

vendor:omronmodel:cx-supervisorscope: - version: -

Trust: 0.7

vendor:omronmodel:cx-supervisorscope:lteversion:<=3.30

Trust: 0.6

vendor:omronmodel:cx-supervisorscope:neversion:3.4.1

Trust: 0.3

vendor:cx supervisormodel: - scope:eqversion:*

Trust: 0.2

sources: IVD: e2e6acef-39ab-11e9-a9b9-000c29342cb1 // ZDI: ZDI-18-260 // CNVD: CNVD-2018-05320 // BID: 103394 // JVNDB: JVNDB-2018-001951 // CNNVD: CNNVD-201803-656 // NVD: CVE-2018-7525

CVSS

SEVERITY

CVSSV2

CVSSV3

JPCERT/CC: JVNDB-2018-001951
value: MEDIUM

Trust: 5.6

nvd@nist.gov: CVE-2018-7525
value: MEDIUM

Trust: 1.0

ZDI: CVE-2018-7525
value: MEDIUM

Trust: 0.7

CNVD: CNVD-2018-05320
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201803-656
value: MEDIUM

Trust: 0.6

IVD: e2e6acef-39ab-11e9-a9b9-000c29342cb1
value: MEDIUM

Trust: 0.2

VULHUB: VHN-137557
value: MEDIUM

Trust: 0.1

JPCERT/CC: JVNDB-2018-001951
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 5.6

nvd@nist.gov: CVE-2018-7525
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

ZDI: CVE-2018-7525
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.7

CNVD: CNVD-2018-05320
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

IVD: e2e6acef-39ab-11e9-a9b9-000c29342cb1
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

VULHUB: VHN-137557
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

JPCERT/CC: JVNDB-2018-001951
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 5.6

nvd@nist.gov: CVE-2018-7525
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
exploitabilityScore: 1.8
impactScore: 3.4
version: 3.0

Trust: 1.0

sources: IVD: e2e6acef-39ab-11e9-a9b9-000c29342cb1 // ZDI: ZDI-18-260 // CNVD: CNVD-2018-05320 // VULHUB: VHN-137557 // JVNDB: JVNDB-2018-001951 // JVNDB: JVNDB-2018-001951 // JVNDB: JVNDB-2018-001951 // JVNDB: JVNDB-2018-001951 // JVNDB: JVNDB-2018-001951 // JVNDB: JVNDB-2018-001951 // JVNDB: JVNDB-2018-001951 // CNNVD: CNNVD-201803-656 // NVD: CVE-2018-7525

PROBLEMTYPE DATA

problemtype:CWE-822

Trust: 1.8

problemtype:CWE-476

Trust: 1.1

problemtype:CWE-121

Trust: 0.8

problemtype:CWE-122

Trust: 0.8

problemtype:CWE-416

Trust: 0.8

problemtype:CWE-787

Trust: 0.8

problemtype:CWE-824

Trust: 0.8

problemtype:CWE-415

Trust: 0.8

sources: VULHUB: VHN-137557 // JVNDB: JVNDB-2018-001951 // NVD: CVE-2018-7525

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201803-656

TYPE

Code problem

Trust: 0.8

sources: IVD: e2e6acef-39ab-11e9-a9b9-000c29342cb1 // CNNVD: CNNVD-201803-656

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-001951

PATCH
title:Release Notes For CX-Supervisor 3.4.1url:https://www.myomron.com/index.php?action=kb&article=1707
Trust: 0.8
title:OMRON has issued an update to correct this vulnerability.url:https://ics-cert.us-cert.gov/advisories/ICSA-18-072-01
Trust: 0.7
title:Omron CX-Supervisor has an unspecified vulnerability (CNVD-2018-05320) patchurl:https://www.cnvd.org.cn/patchInfo/show/121535
Trust: 0.6
title:Omron CX-Supervisor Buffer error vulnerability fixurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=79275
Trust: 0.6
sources:
            
            
            ZDI: ZDI-18-260 // 
            
            
            
            CNVD: CNVD-2018-05320 // 
            
            
            
            JVNDB: JVNDB-2018-001951 // 
            
            
            
            CNNVD: CNNVD-201803-656

EXTERNAL IDS
db:NVDid:CVE-2018-7525
Trust: 4.3
db:ICS CERTid:ICSA-18-072-01
Trust: 3.4
db:BIDid:103394
Trust: 2.0
db:CNNVDid:CNNVD-201803-656
Trust: 0.9
db:CNVDid:CNVD-2018-05320
Trust: 0.8
db:JVNid:JVNVU95051832
Trust: 0.8
db:JVNDBid:JVNDB-2018-001951
Trust: 0.8
db:ZDI_CANid:ZDI-CAN-5309
Trust: 0.7
db:ZDIid:ZDI-18-260
Trust: 0.7
db:IVDid:E2E6ACEF-39AB-11E9-A9B9-000C29342CB1
Trust: 0.2
db:VULHUBid:VHN-137557
Trust: 0.1
sources:
            
            
            IVD: e2e6acef-39ab-11e9-a9b9-000c29342cb1 // 
            
            
            
            ZDI: ZDI-18-260 // 
            
            
            
            CNVD: CNVD-2018-05320 // 
            
            
            
            VULHUB: VHN-137557 // 
            
            
            
            BID: 103394 // 
            
            
            
            JVNDB: JVNDB-2018-001951 // 
            
            
            
            CNNVD: CNNVD-201803-656 // 
            
            
            
            NVD: CVE-2018-7525

REFERENCES
url:https://ics-cert.us-cert.gov/advisories/icsa-18-072-01
Trust: 4.1
url:http://www.securityfocus.com/bid/103394
Trust: 1.7
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7517
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7519
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7521
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7523
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7525
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7513
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-7515
Trust: 0.8
url:https://ics-cert.us-cert.gov/recommended-practices
Trust: 0.8
url:http://jvn.jp/vu/jvnvu95051832/index.html
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-7515
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-7517
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-7519
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-7521
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-7523
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-7525
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-7513
Trust: 0.8
url:https://industrial.omron.eu/
Trust: 0.3
sources:
            
            
            ZDI: ZDI-18-260 // 
            
            
            
            CNVD: CNVD-2018-05320 // 
            
            
            
            VULHUB: VHN-137557 // 
            
            
            
            BID: 103394 // 
            
            
            
            JVNDB: JVNDB-2018-001951 // 
            
            
            
            CNNVD: CNNVD-201803-656 // 
            
            
            
            NVD: CVE-2018-7525

CREDITS
Ariele Caltabiano (kimiya)
Trust: 0.7
sources:
            
            
            ZDI: ZDI-18-260

SOURCES
db:IVDid:e2e6acef-39ab-11e9-a9b9-000c29342cb1
db:ZDIid:ZDI-18-260
db:CNVDid:CNVD-2018-05320
db:VULHUBid:VHN-137557
db:BIDid:103394
db:JVNDBid:JVNDB-2018-001951
db:CNNVDid:CNNVD-201803-656
db:NVDid:CVE-2018-7525

LAST UPDATE DATE
2024-11-23T21:39:28.470000+00:00

SOURCES UPDATE DATE
db:ZDIid:ZDI-18-260date:2018-03-23T00:00:00
db:CNVDid:CNVD-2018-05320date:2018-03-15T00:00:00
db:VULHUBid:VHN-137557date:2019-10-09T00:00:00
db:BIDid:103394date:2018-03-13T00:00:00
db:JVNDBid:JVNDB-2018-001951date:2018-08-22T00:00:00
db:CNNVDid:CNNVD-201803-656date:2019-10-17T00:00:00
db:NVDid:CVE-2018-7525date:2024-11-21T04:12:17.857

SOURCES RELEASE DATE
db:IVDid:e2e6acef-39ab-11e9-a9b9-000c29342cb1date:2018-03-15T00:00:00
db:ZDIid:ZDI-18-260date:2018-03-23T00:00:00
db:CNVDid:CNVD-2018-05320date:2018-03-15T00:00:00
db:VULHUBid:VHN-137557date:2018-03-21T00:00:00
db:BIDid:103394date:2018-03-13T00:00:00
db:JVNDBid:JVNDB-2018-001951date:2018-03-16T00:00:00
db:CNNVDid:CNNVD-201803-656date:2018-03-19T00:00:00
db:NVDid:CVE-2018-7525date:2018-03-21T20:29:01.387