Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-7514
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may cause a stack-based buffer overflow.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
栈缓冲区溢出
Source: NVD (National Vulnerability Database)
Vulnerability Title
Omron CX-One多个软件缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Omron CX-One是日本（欧姆龙）Omron公司的一套集成工具包，其中包括了用于网络、PT、变频器、温度控制器以及PLC编程软件等。CX-FLnet等都是集成在其中的应用程序。 Omron CX-One 4.42及之前版本中的多个软件存在基于堆的缓冲区溢出漏洞。远程攻击者可借助畸形的项目文件利用该漏洞执行代码。以下软件及版本受到影响：Omron CX-FLnet 1.00及之前版本；CX-Protocol 1.992及之前版本；CX-Programmer 9.65及之前版本；CX-Server 5.
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
ICS-CERTOmron CX-One The following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 a -
II. Public POCs for CVE-2018-7514
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2018-7514
Please Login to view more intelligence information
New Vulnerabilities
Product: Omron CX-One
Vendor: ICS-CERT
Same weakness: CWE-121
V. Comments for CVE-2018-7514

No comments yet

Leave a comment