Read the docs
TI-2018-06376 Aliases CVE-2018-8834GHSA-qm7h-hvgh-53wq

Heap-based buffer overflow in ICS-CERT Omron CX-One

Priority LOW 34CWE-122Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-122 and the CVSS impact.

Summary

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may cause a heap-based buffer overflow.

Why it matters now

EPSS 0.00318 24th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
ICS-CERTOmron CX-OneThe following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior.—No fix listedCNA
  • Omron CX-One VendorICS-CERT Affected The following versions of CX-One are affected: CX-One Versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior. Fixed in — No fix listed CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:a:omron:cx-flnet:*:*:*:*:*:*:*:*up to 1.00VulnerableOMRON Corporation
cpe:2.3:a:omron:cx-one:*:*:*:*:*:*:*:*up to 4.42VulnerableOMRON Corporation
cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:*up to 9.65VulnerableOMRON Corporation
cpe:2.3:a:omron:cx-protocol:*:*:*:*:*:*:*:*up to 1.992VulnerableOMRON Corporation
cpe:2.3:a:omron:cx-server:*:*:*:*:*:*:*:*up to 5.0.22VulnerableOMRON Corporation
cpe:2.3:a:omron:network_configurator:*:*:*:*:*:*:*:*up to 3.63VulnerableOMRON Corporation
cpe:2.3:a:omron:switch_box_utility:*:*:*:*:*:*:*:*up to 1.68VulnerableOMRON Corporation
  • cpe:2.3:a:omron:cx-flnet:*:*:*:*:*:*:*:* Versions up to 1.00 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:cx-one:*:*:*:*:*:*:*:* Versions up to 4.42 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:cx-programmer:*:*:*:*:*:*:*:* Versions up to 9.65 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:cx-protocol:*:*:*:*:*:*:*:* Versions up to 1.992 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:cx-server:*:*:*:*:*:*:*:* Versions up to 5.0.22 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:network_configurator:*:*:*:*:*:*:*:* Versions up to 3.63 Vulnerable ·OMRON Corporation
  • cpe:2.3:a:omron:switch_box_utility:*:*:*:*:*:*:*:* Versions up to 1.68 Vulnerable ·OMRON Corporation

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-8834
  2. 2026-10-03 Alias added: GHSA-qm7h-hvgh-53wq

References

Advisory 1

  • TI-2018-05439 Type confusion in ICS-CERT Omron CX-One CVSS 3.0HIGH 7.8
  • TI-2018-05423 Stack-based buffer overflow in ICS-CERT Omron CX-One CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences