ICS-CERT CX-Supervisor vulnerabilities

Newest CVEs

• CVE-2018-19020

  When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a…

  ICS-CERT · CX-Supervisor

  Medium5.0
• CVE-2018-19018

  An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files. An…

  ICS-CERT · CX-Supervisor

  High7.3
• CVE-2018-19015

  An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted…

  ICS-CERT · CX-Supervisor

  High7.3
• CVE-2018-19019

  A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An attacker could use a specially crafted…

  ICS-CERT · CX-Supervisor

  High7.3
• CVE-2018-19017

  Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the application fails to…

  ICS-CERT · CX-Supervisor

  High8.8
• CVE-2018-19013

  An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted…

  ICS-CERT · CX-Supervisor

  Medium5.0
• CVE-2018-19011

  CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the…

  ICS-CERT · CX-Supervisor

  High8.8