What’s Vulnerable › Vulnerabilities

CVE-2018-7514

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-17 · updated 2026-06-17
• Weakness: CWE-121

Description

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may cause a stack-based buffer overflow.

Affected products

• Omron Cx-Flnet: through 1.00
• Omron CX-One: through 4.42
• OMRON Corporation CX-Programmer: through 9.65
• Omron CX-Protocol: through 1.992
• Omron CX-Server: through 5.0.22
• Omron Network Configurator: through 3.63
• Omron Switch Box Utility: through 1.68

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-100-02
• https://ics-cert.us-cert.gov/advisories/ICSA-18-100-02

Get alerted when CVE-2018-7514 or the next vulnerability affects your stack