CVE-2018-19013

An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file.

Score

CVSS 3.0 5.0 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-01-22

Last modified

2024-09-16

Weaknesses

CWE-77

Affected products

• Cx-supervisor (Ics-cert)
• Cx-supervisor (Omron)

References

• http://www.securityfocus.com/bid/106654
• https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01