Back to search
CVE-2018-18989
Published: Dec 4, 2018
Modified: Aug 5, 2024
PUBLISHED
Description
In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
| Vendor | Product | Versions |
|---|---|---|
n/a | CX-One (CX-Programmer and CX-Server) | affected CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior) |
Weaknesses (CWE)
References
https://ics-cert.us-cert.gov/advisories/ICSA-18-338-01
x_refsource_MISC
106106
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now