CVE-2018-19027

2019-01-1000:00:00

CWE-843

icscert

www.cve.org

7.8 High

AI Score

Confidence

High

0.029 Low

EPSS

Percentile

90.9%

JSON

Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.

CNA Affected

[
  {
    "product": "CX-Protocol within CX-One",
    "vendor": "Omron",
    "versions": [
      {
        "status": "affected",
        "version": "CX-One Versions 4.50 and prior, including the following applications: CX-Protocol Versions 2.0 and prior"
      }
    ]
  }
]