What is CVE-2018-17909?

CVE-2018-17909 is a high-severity vulnerability in Omron Cx-supervisor, classified under Use After Free. CVSS score: 7.8/10. Published 2018-11-05.

How severe is CVE-2018-17909?

High severity. CVSS v3 base score is 7.8 out of 10.

Use After Free in Omron Cx-supervisor

CVE-2018-17909

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application.

Vulnerability class: Use-After-Free

EPSS: 0.016 (73.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Omron Cx-supervisor — versions Versions 3.4.1.0 and prior.

Weakness classification (CWE)

CWE-416 — Use After Free

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2018-17909?: CVE-2018-17909 is a high-severity vulnerability in Omron Cx-supervisor, classified under Use After Free. CVSS score: 7.8/10. Published 2018-11-05.
How severe is CVE-2018-17909?: High severity. CVSS v3 base score is 7.8 out of 10.