CVE-2019-18236

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.5_20190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.

• CWE-121
• CWE-119

• https://www.us-cert.gov/ics/advisories/icsa-19-353-03Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-19-1033/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-19-1034/Third Party Advisory, VDB Entry
• https://www.us-cert.gov/ics/advisories/icsa-19-353-03Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-19-1033/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-19-1034/Third Party Advisory, VDB Entry

Published

Dec 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18230Honeywell equIP and Performance series IP cameras, multiple …7.5
• CVE-2019-18231Advantech Spectre RT ERT351 Versions 5.1.3 and prior logins …7.5
• CVE-2019-18232SafeNet Sentinel LDK License Manager, all versions prior to …7.8
• CVE-2019-18233In Advantech Spectre RT Industrial Routers ERT351 5.1.3 and …6.1
• CVE-2019-18234Equinox Control Expert all versions, is vulnerable to an SQL…9.8
• CVE-2019-18235Advantech Spectre RT ERT351 Versions 5.1.3 and prior has ins…9.8
• CVE-2019-18238In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, …7.5
• CVE-2019-1824A vulnerability in the web-based management interface of Cis…8.1
• CVE-2019-18240In Fuji Electric V-Server 4.0.6 and prior, several heap-base…9.8
• CVE-2019-18241In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 H…6.5
• CVE-2019-18242In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, …7.5
• CVE-2019-18243HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authe…5.5