CVE-2018-17909

2018-11-0523:00:00

CWE-416

icscert

www.cve.org

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

44.9%

JSON

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application.

CNA Affected

[
  {
    "product": "CX-Supervisor",
    "vendor": "Omron",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 3.4.1.0 and prior."
      }
    ]
  }
]