← Vulnerability feed

Vulnerability record · CVE-2019-18251 · published 26 November 2019

CVE-2019-18251: Omron cx-supervisor vulnerability

OOmron · Cx Supervisor

In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function vulnerability requiring user interaction to exploit.

8.8 CVSS 3.1 High EPSS 1.7% · top 23.3% CWE-477 · CWE-477
8.8CVSS 3.1 base score, v2 6.8
1.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete function vulnerability requiring user interaction to exploit.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.us-cert.gov/ics/advisories/icsa-19-318-04 Third Party AdvisoryUS Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-19-997/ Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-318-04 Third Party AdvisoryUS Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-19-997/ Third Party Advisory

Track CVE-2019-18251 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.0CVE-2019-18988TeamViewer Desktop shared AES key bypasses remote-login access controlTeamViewer Desktop through 14.7.1965 uses the same AES key across all customer installations, including for OptionsPasswordAES. Anyone who knows that…KEVEPSS 4.7%analysed9.8CVE-2018-16550Teamviewer vulnerabilityTeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, whi…EPSS 3.6%9.3CVE-2010-3128Teamviewer vulnerabilityUntrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code a…EPSS 8.4%8.8CVE-2021-34859Teamviewer memory buffer overflow vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required …EPSS 8.9%8.8CVE-2020-13699Teamviewer argument injection vulnerabilityTeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitr…EPSS 26%8.8CVE-2018-19011Omron cx-supervisor code injection vulnerabilityCX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code u…EPSS 2.4%8.8CVE-2018-19017Omron cx-supervisor use after free vulnerabilitySeveral use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the applicatio…EPSS 2.4%8.1CVE-2018-14333Teamviewer information exposure vulnerabilityTeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, w…EPSS 2.6%

Source: NIST National Vulnerability Database (record CVE-2019-18251), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.