CVE-2018-19011

CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application.

Score

CVSS 3.0 8.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-01-22

Last modified

2024-09-16

Weaknesses

CWE-94

Affected products

• Cx-supervisor (Ics-cert)
• Cx-supervisor (Omron)

References

• http://www.securityfocus.com/bid/106654
• https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01