CVE-2018-17907

2018-11-0523:00:00

CWE-119

icscert

www.cve.org

AI Score

3.8

Confidence

High

EPSS

0.001

Percentile

40.5%

JSON

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior and tampering with the value of an offset, an attacker can force the application to read a value outside of an array.

CNA Affected

[
  {
    "product": "CX-Supervisor",
    "vendor": "Omron",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 3.4.1.0 and prior."
      }
    ]
  }
]