HOMEVULNERABILITIESCVE-2018-7530
HIGH

CVE-2018-7530

CWE-843Published: April 17, 2018· Updated: Jun 17, 2026

7.8
CVSS v3.1

Official Description

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and prior, and Switch Box Utility versions 1.68 and prior, may allow the pointer to call an incorrect object resulting in an access of resource using incompatible type condition.

NVD Source

Technical Analysis

CVE-2018-7530 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges Req.Low
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

omron7 product(s)
cx-flnetcx-onecx-programmercx-protocolcx-servernetwork configuratorswitch box utility
Source: NVD CPE · 7 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

All References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-18-100-02Third Party Advisory · US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-18-100-02Third Party Advisory · US Government Resource

Quick Facts

CVE IDCVE-2018-7530
CVSS Score7.8 / 10
SeverityHIGH
WeaknessCWE-843
CISA KEVNo
Affected1 vendor(s)
PublishedApr 17, 2018

Related CVEs (CWE-843)

Recommended Actions

  • Apply vendor patches immediately
  • Monitor CVE-2018-7530 in threat intel feeds
  • Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.