Lucene search
IcscertCVELIST:CVE-2018-18989HistoryDec 04, 2018 - 10:00 p.m.
CVE-2018-18989
2018-12-0422:00:00
CWE-416
icscert
www.cve.org
1
0.001 Low
EPSS
Percentile
45.0%
In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
CNA Affected
[
{
"product": "CX-One (CX-Programmer and CX-Server)",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior)"
}
]
}
]Related
cve
cve
CVE-2018-18989
2018-12-04 22:29:00
prion
prion
Code injection
2018-12-04 22:29:00
nvd
nvd
CVE-2018-18989
2018-12-04 22:29:00
zdi
zdi
ics
ics
Omron CX-One
2018-12-04 12:00:00