Omron vulnerabilities

83 vulnerabilities

Known vulnerabilities in Omron products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 514 products.

Products

50 of 514
6.5CVE-2018-16207omron social solutions co.,ltd.poweract pro master agent for windows+1
EPSS score
1.31%
PowerAct Pro Master Agent for Windows Version 5.13 and earlier allows authenticated attackers to bypass access restriction to alter or edit unauthorized files via unspecified vectors.7.8CVE-2018-19027omroncx-one+2
EPSS score
1.42%
Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.8.8CVE-2018-19017ics-certcx-supervisor+1
EPSS score
2.40%
Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.5CVE-2018-19020ics-certcx-supervisor+1
EPSS score
0.83%
When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array.7.3CVE-2018-19015ics-certcx-supervisor+1
EPSS score
1.48%
An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file. An attacker could exploit this to execute code under the privileges of the application.7.3CVE-2018-19019ics-certcx-supervisor+1
EPSS score
1.50%
A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.7.3CVE-2018-19018ics-certcx-supervisor+1
EPSS score
1.16%
An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.5CVE-2018-19013ics-certcx-supervisor+1
EPSS score
0.75%
An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file.8.8CVE-2018-19011ics-certcx-supervisor+1
EPSS score
2.42%
CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application.7.8CVE-2018-17905omroncx-supervisor
EPSS score
1.07%
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with a specific byte, memory corruption may occur within a specific object.4.3CVE-2018-17907omroncx-supervisor
EPSS score
0.89%
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value outside of an array.7.8CVE-2018-17909omroncx-supervisor
EPSS score
1.63%
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application.7.8CVE-2018-17913omroncx-supervisor
EPSS score
1.63%
A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to execute code in the context of the application.5.3CVE-2018-7523ics-certomron cx-supervisor+1
EPSS score
0.34%
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability.5.3CVE-2018-7521ics-certomron cx-supervisor+1
EPSS score
0.34%
In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor parses a specially crafted project file.5.3CVE-2018-7515ics-certbeaconmedæs totalalert scroll medical air systems web application+1
EPSS score
0.29%
In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when CX Supervisor indirectly calls an initialized pointer when parsing malformed packets.5.3CVE-2018-7525ics-certomron cx-supervisor+1
EPSS score
0.34%
In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability.7.8CVE-2018-7530ics-certomron cx-one+7
EPSS score
0.33%
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may allow the pointer to call an incorrect object resulting in an access of resource using incompatible type condition.7.8CVE-2018-7514ics-certomron cx-one+7
EPSS score
0.32%
Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may cause a stack-based buffer overflow.5.3CVE-2018-7513ics-certomron cx-supervisor+1
EPSS score
0.36%
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow.