CVE-2019-18251 Other in Omron CX-Supervisor

High 8.8 Published 25 Nov 2019 Updated 5 Aug 2024

Omron CX-Supervisor includes an outdated TeamViewer version with an obsolete function vulnerability that allows code execution via user interaction.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2019-18251?

CVE-2019-18251 is a high-severity vulnerability in Omron CX-Supervisor, published on 25 Nov 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function vulnerability requiring user interaction to exploit.

Weakness: CWE-477

Which versions are affected by CVE-2019-18251?

It affects 2 products.

Products include Omron Cx-Supervisor, Teamviewer Teamviewer.

How do I fix CVE-2019-18251?

No fix has been published for CVE-2019-18251 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-18251 being exploited?

There is no known exploitation of CVE-2019-18251 in the wild and no public exploit code.

Sources

Also known as GHSA-mf4j-c7rg-8p9r.