var-201911-1039
Vulnerability from variot

In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function vulnerability requiring user interaction to exploit. Omron CX-Supervisor and Teamviewer Has unspecified vulnerabilities.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OMRON CX-Supervisor. The issue results from the use of an outdated version of Teamviewer containing known vulnerabilities. An attacker can leverage this vulnerability to execute code in the context of the current process. Omron CX-Supervisor is a visual machine controller from Japan's Omron.

CX-Supervisor has an unknown vulnerability, which can be used by an attacker to cause information leakage, comprehensive damage to the system, and denial of service. TeamViewer is a set of software for remote control, desktop sharing and file transfer of German TeamViewer company

Show details on source website

To clipboard 

{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "teamviewer",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "teamviewer",
        "version": "5.0.8703_qs"
      },
      {
        "_id": null,
        "model": "cx-supervisor",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "omron",
        "version": "3.5\\(12\\)"
      },
      {
        "_id": null,
        "model": "teamviewer",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "teamviewer",
        "version": "5.0.8703 qs"
      },
      {
        "_id": null,
        "model": "cx-supervisor",
        "scope": "lte",
        "trust": 0.8,
        "vendor": "omron",
        "version": "3.5 (12)"
      },
      {
        "_id": null,
        "model": "cx-supervisor",
        "scope": null,
        "trust": 0.7,
        "vendor": "omron",
        "version": null
      },
      {
        "_id": null,
        "model": "cx-supervisor",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "omron",
        "version": "\u003c=3.5(12)"
      },
      {
        "_id": null,
        "model": null,
        "scope": "lte",
        "trust": 0.2,
        "vendor": "cx supervisor",
        "version": "\u003c=3.5(12)"
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "72b943a0-4d32-4f39-8090-625814291929"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-997"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42429"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012792"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18251"
      }
    ]
  },
  "configurations": {
    "_id": null,
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:teamviewer:teamviewer",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:omron:cx-supervisor",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012792"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Michael DePlante",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-997"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-999"
      }
    ],
    "trust": 1.3
  },
  "cve": "CVE-2019-18251",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2019-18251",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.9,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2019-42429",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "72b943a0-4d32-4f39-8090-625814291929",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.2,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.9 [IVD]"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "VHN-150579",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.8,
            "id": "CVE-2019-18251",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 8.8,
            "baseSeverity": "High",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2019-18251",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "Required",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "ZDI",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.8,
            "id": "CVE-2019-18251",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 0.7,
            "userInteraction": "REQUIRED",
            "vectorString": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2019-18251",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2019-18251",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "ZDI",
            "id": "CVE-2019-18251",
            "trust": 0.7,
            "value": "HIGH"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2019-42429",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201911-999",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "IVD",
            "id": "72b943a0-4d32-4f39-8090-625814291929",
            "trust": 0.2,
            "value": "HIGH"
          },
          {
            "author": "VULHUB",
            "id": "VHN-150579",
            "trust": 0.1,
            "value": "MEDIUM"
          },
          {
            "author": "VULMON",
            "id": "CVE-2019-18251",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "72b943a0-4d32-4f39-8090-625814291929"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-997"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42429"
      },
      {
        "db": "VULHUB",
        "id": "VHN-150579"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-18251"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012792"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-999"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18251"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function vulnerability requiring user interaction to exploit. Omron CX-Supervisor and Teamviewer Has unspecified vulnerabilities.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OMRON CX-Supervisor. The issue results from the use of an outdated version of Teamviewer containing known vulnerabilities. An attacker can leverage this vulnerability to execute code in the context of the current process. Omron CX-Supervisor is a visual machine controller from Japan\u0027s Omron. \n\nCX-Supervisor has an unknown vulnerability, which can be used by an attacker to cause information leakage, comprehensive damage to the system, and denial of service. TeamViewer is a set of software for remote control, desktop sharing and file transfer of German TeamViewer company",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-18251"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012792"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-997"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42429"
      },
      {
        "db": "IVD",
        "id": "72b943a0-4d32-4f39-8090-625814291929"
      },
      {
        "db": "VULHUB",
        "id": "VHN-150579"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-18251"
      }
    ],
    "trust": 3.15
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-18251",
        "trust": 4.1
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-997",
        "trust": 3.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-19-318-04",
        "trust": 3.2
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-999",
        "trust": 0.9
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42429",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012792",
        "trust": 0.8
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-9313",
        "trust": 0.7
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.4729",
        "trust": 0.6
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.4314",
        "trust": 0.6
      },
      {
        "db": "NSFOCUS",
        "id": "47528",
        "trust": 0.6
      },
      {
        "db": "IVD",
        "id": "72B943A0-4D32-4F39-8090-625814291929",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-150579",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-18251",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "72b943a0-4d32-4f39-8090-625814291929"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-997"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42429"
      },
      {
        "db": "VULHUB",
        "id": "VHN-150579"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-18251"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012792"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-999"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18251"
      }
    ]
  },
  "id": "VAR-201911-1039",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "IVD",
        "id": "72b943a0-4d32-4f39-8090-625814291929"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42429"
      },
      {
        "db": "VULHUB",
        "id": "VHN-150579"
      }
    ],
    "trust": 1.4707547
  },
  "iot_taxonomy": {
    "_id": null,
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "72b943a0-4d32-4f39-8090-625814291929"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42429"
      }
    ]
  },
  "last_update_date": "2024-11-23T22:33:39.414000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "Top Page",
        "trust": 0.8,
        "url": "https://www.fa.omron.co.jp/"
      },
      {
        "title": "Top Page",
        "trust": 0.8,
        "url": " https://www.teamviewer.com/ja/ "
      },
      {
        "title": "Omron has issued an update to correct this vulnerability.",
        "trust": 0.7,
        "url": "https://www.us-cert.gov/ics/advisories/icsa-19-318-04"
      },
      {
        "title": "Patch for Omron CX-Supervisor has an unknown vulnerability (CNVD-2019-42429)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/192107"
      },
      {
        "title": "Omron CX-Supervisor Teamviewer Security vulnerabilities",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=103868"
      },
      {
        "title": "nvd_scrapper",
        "trust": 0.1,
        "url": "https://github.com/abhav/nvd_scrapper "
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-997"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42429"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-18251"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012792"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-999"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "CWE-477",
        "trust": 1.0
      },
      {
        "problemtype": "NVD-CWE-noinfo",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-18251"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 3.9,
        "url": "https://www.us-cert.gov/ics/advisories/icsa-19-318-04"
      },
      {
        "trust": 2.6,
        "url": "https://www.zerodayinitiative.com/advisories/zdi-19-997/"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-18251"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-18251"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.4729/"
      },
      {
        "trust": 0.6,
        "url": "http://www.nsfocus.net/vulndb/47528"
      },
      {
        "trust": 0.6,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.4314/"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/171553"
      },
      {
        "trust": 0.1,
        "url": "https://github.com/abhav/nvd_scrapper"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-997"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42429"
      },
      {
        "db": "VULHUB",
        "id": "VHN-150579"
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-18251"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012792"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-999"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18251"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "IVD",
        "id": "72b943a0-4d32-4f39-8090-625814291929",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-997",
        "ident": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-42429",
        "ident": null
      },
      {
        "db": "VULHUB",
        "id": "VHN-150579",
        "ident": null
      },
      {
        "db": "VULMON",
        "id": "CVE-2019-18251",
        "ident": null
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012792",
        "ident": null
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-999",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18251",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2019-11-27T00:00:00",
        "db": "IVD",
        "id": "72b943a0-4d32-4f39-8090-625814291929",
        "ident": null
      },
      {
        "date": "2019-12-09T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-997",
        "ident": null
      },
      {
        "date": "2019-11-27T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-42429",
        "ident": null
      },
      {
        "date": "2019-11-26T00:00:00",
        "db": "VULHUB",
        "id": "VHN-150579",
        "ident": null
      },
      {
        "date": "2019-11-26T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-18251",
        "ident": null
      },
      {
        "date": "2019-12-13T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-012792",
        "ident": null
      },
      {
        "date": "2019-11-14T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201911-999",
        "ident": null
      },
      {
        "date": "2019-11-26T00:15:11.857000",
        "db": "NVD",
        "id": "CVE-2019-18251",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2019-12-09T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-997",
        "ident": null
      },
      {
        "date": "2019-11-27T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-42429",
        "ident": null
      },
      {
        "date": "2019-12-11T00:00:00",
        "db": "VULHUB",
        "id": "VHN-150579",
        "ident": null
      },
      {
        "date": "2019-12-11T00:00:00",
        "db": "VULMON",
        "id": "CVE-2019-18251",
        "ident": null
      },
      {
        "date": "2019-12-13T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-012792",
        "ident": null
      },
      {
        "date": "2020-08-10T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201911-999",
        "ident": null
      },
      {
        "date": "2024-11-21T04:32:55.383000",
        "db": "NVD",
        "id": "CVE-2019-18251",
        "ident": null
      }
    ]
  },
  "threat_type": {
    "_id": null,
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-999"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "_id": null,
    "data": "Omron CX-Supervisor and  Teamviewer Vulnerability in",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012792"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "_id": null,
    "data": "other",
    "sources": [
      {
        "db": "IVD",
        "id": "72b943a0-4d32-4f39-8090-625814291929"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-999"
      }
    ],
    "trust": 0.8
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.