Vulnerabilities > Omron > CX Supervisor > 3.5

DATE CVE VULNERABILITY TITLE RISK
2019-11-26 CVE-2019-18251 In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS.
network
omron teamviewer
6.8
2019-02-12 CVE-2018-19020 Out-of-bounds Read vulnerability in Omron Cx-Supervisor 3.5
When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array.
network
omron CWE-125
3.5
2019-02-12 CVE-2018-19018 Access of Uninitialized Pointer vulnerability in Omron Cx-Supervisor 3.5
An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files.
network
omron CWE-824
6.0
2019-01-28 CVE-2018-19015 Command Injection vulnerability in Omron Cx-Supervisor 3.5
An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file.
network
omron CWE-77
6.0
2019-01-22 CVE-2018-19019 Incorrect Type Conversion or Cast vulnerability in Omron Cx-Supervisor 3.5
A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior).
network
omron CWE-704
6.8
2019-01-22 CVE-2018-19017 Use After Free vulnerability in Omron Cx-Supervisor 3.5
Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior).
network
omron CWE-416
6.8
2019-01-22 CVE-2018-19013 Command Injection vulnerability in Omron Cx-Supervisor 3.5
An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file.
network
omron CWE-77
4.9
2019-01-22 CVE-2018-19011 Code Injection vulnerability in Omron Cx-Supervisor 3.5
CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file.
network
omron CWE-94
6.8
2018-03-21 CVE-2018-7525 NULL Pointer Dereference vulnerability in Omron Cx-Supervisor 3.5
In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability.
local
low complexity
omron CWE-476
4.6
2018-03-21 CVE-2018-7523 Double Free vulnerability in Omron Cx-Supervisor 3.5
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability.
local
low complexity
omron CWE-415
4.6