ZeroHour

CVE-2018-19015

CVSS 3.1
7.3 high
EPSS
1%p72
Published
()
Modified
Description

An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file. An attacker could exploit this to execute code under the privileges of the application.

Vendors
omron
Products
cx-supervisor
Weakness
CWE-77, CWE-78
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.