CVE-2018-19027
Last modified
CVE-2018-19027 is a vulnerability of currently unknown severity. Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.. EPSS estimates a 1.42% chance of exploitation in the next 30 days.
Description
Three type confusion vulnerabilities exist in CX-One Versions 4.50 and prior and CX-Protocol Versions 2.0 and prior when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Omron | Cx-One | <= 4.50 |
| Omron | Cx-Protocol | <= 2.0 |
References
- http://www.securityfocus.com/bid/106524Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-19-010-02Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/106524Third Party Advisory
- https://ics-cert.us-cert.gov/advisories/ICSA-19-010-02Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-19027?
How severe is CVE-2018-19027?
How do I fix CVE-2018-19027?
Are you affected by CVE-2018-19027?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST