Omron CX-Supervisor (Update A) (ICSA-19-318-04) – Product Used in the Energy Sector

December 19, 2019

CISA has updated this advisory with additional details on the nature of the vulnerability. Read the advisory at CISA.

November 18, 2019

CISA has published an advisory on a use of obsolete function vulnerability in Omron CX-Supervisor. Versions 3.5 (12) and prior are affected. Successful exploitation of this vulnerability could result in information disclosure, total compromise of the system, and system unavailability. Omron recommends users update to CX-Supervisor Version 3.51 (9). CISA also recommends a series of measures to mitigate the vulnerability. Read the advisory at WaterISAC.