QwikSec

Security Database

CVE

CWE

Training

CVE-2019-6556

Published: Apr 10, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.

Vendor	Product	Versions
Omron	CX-Programmer within CX-One	affected `CX-Programmer v9.70 and prior and Common Components January 2019 and prior`

Weaknesses (CWE)

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-094-01

x_refsource_MISC

https://www.zerodayinitiative.com/advisories/ZDI-19-344/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.