PT-2019-9711 · Omron · Cx-Supervisor

Esteban Ruiz + 2 · Published 2019-01-19 · Updated 2019-10-09 · CVE-2018-19019

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CX-Supervisor versions 3.42 and prior

Description A type confusion issue exists when processing project files, allowing an attacker to use a specially crafted project file to exploit and execute code under the privileges of the application.

Recommendations For versions 3.42 and prior, update to a version later than 3.42 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Fix

Type Confusion

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-843

CWE-704

Related Identifiers

CVE-2018-19019

ZDI-19-119

ZDI-19-175

Affected Products

Cx-Supervisor

References · 6

• https://zerodayinitiative.com/advisories/ZDI-19-119 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-19019 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19019 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-19-175 · Security Note
• http://securityfocus.com/bid/106654 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01 · Note