CVE-2018-17913

A type confusion vulnerability exists when processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, which may allow an attacker to execute code in the context of the application.

Score

CVSS 3.0 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-11-05

Last modified

2024-09-16

Weaknesses

CWE-704

Affected products

• Cx-supervisor (Omron)

References

• http://www.securityfocus.com/bid/105691
• https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01