Read the docs
TI-2018-05439 Aliases CVE-2018-7530GHSA-rwjj-72mq-wxxc

Type confusion in ICS-CERT Omron CX-One

Priority LOW 34CWE-843Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-843 and the CVSS impact.

Summary

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may allow the pointer to call an incorrect object resulting in an access of resource using incompatible type condition.

Why it matters now

EPSS 0.00327 25th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ICS-CERTOmron CX-OneThe following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior.—No fix listedCNA
  • Omron CX-One VendorICS-CERT Affected The following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior. Fixed in — No fix listed CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:a:omron:cx-flnet:*:*:*:*:*:*:*:*up to 1.00VulnerableOMRON Corporation
cpe:2.3:a:omron:cx-one:*:*:*:*:*:*:*:*up to 4.42VulnerableOMRON Corporation
cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:*up to 9.65VulnerableOMRON Corporation
cpe:2.3:a:omron:cx-protocol:*:*:*:*:*:*:*:*up to 1.992VulnerableOMRON Corporation
cpe:2.3:a:omron:cx-server:*:*:*:*:*:*:*:*up to 5.0.22VulnerableOMRON Corporation
cpe:2.3:a:omron:network_configurator:*:*:*:*:*:*:*:*up to 3.63VulnerableOMRON Corporation
cpe:2.3:a:omron:switch_box_utility:*:*:*:*:*:*:*:*up to 1.68VulnerableOMRON Corporation
  • cpe:2.3:a:omron:cx-flnet:*:*:*:*:*:*:*:* Versions up to 1.00 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:cx-one:*:*:*:*:*:*:*:* Versions up to 4.42 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:* Versions up to 9.65 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:cx-protocol:*:*:*:*:*:*:*:* Versions up to 1.992 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:cx-server:*:*:*:*:*:*:*:* Versions up to 5.0.22 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:network_configurator:*:*:*:*:*:*:*:* Versions up to 3.63 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:switch_box_utility:*:*:*:*:*:*:*:* Versions up to 1.68 Vulnerable ·OMRON Corporation

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-7530
  2. 2026-10-03 Alias added: GHSA-rwjj-72mq-wxxc

References

Advisory 1

  • TI-2018-06376 Heap-based buffer overflow in ICS-CERT Omron CX-One CVSS 3.1HIGH 7.8
  • TI-2018-05423 Stack-based buffer overflow in ICS-CERT Omron CX-One CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences