HTTP: OMRON CX-One CX-Position cdmapi32 Stack-based Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the OMRON CX-One CX-Position module. A successful attack can lead to arbitrary code execution.

Extended Description

Two stack-based buffer overflow vulnerabilities have been discovered in CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior). When processing project files, the application allows input data to exceed the buffer. An attacker could use a specially crafted project file to overflow the buffer and execute code under the privileges of the application.

Affected Products

Omron cx-programmer

References

BugTraq: 106106

CVE: CVE-2018-18993

URL: http://www.zerodayinitiative.com/advisories/zdi-18-1366/

Short Name

HTTP:STC:CVE-2018-18993-BO

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: OMRON CX-One CX-Position cdmapi32 Stack-based Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?