In CX-One Versions 4.42 and prior (CX-Programmer Versions 9.66 and prior and CX-Server Versions 5.0.23 and prior), when processing project files, the application fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
omron cx-server |
||
omron cx-programmer |
||
omron cx-one |
Vulmon