CVEvulnerability
CVE-2018-17909
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-11-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application.
Affected configurations
• omron cx-supervisor (<= 3.4.1.0)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- http://www.securityfocus.com/bid/105691 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/105691 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01 Third Party Advisory, US Government Resource