CVE-2018-19027

Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.

Score

CVSS 3.0 7.8 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2019-01-30

Last modified

2024-09-16

Weaknesses

CWE-704, CWE-843

Affected products

• Cx-one (Omron)
• Cx-protocol (Omron)
• Cx-protocol Within Cx-one (Omron)

References

• http://www.securityfocus.com/bid/106524
• https://ics-cert.us-cert.gov/advisories/ICSA-19-010-02