CX-Supervisor
Ics-Cert · 7 CVEs
When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attack…
Feb 12, 2019
An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusio…
Feb 12, 2019
An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42…
Jan 28, 2019
A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An atta…
Jan 22, 2019
Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing…
Jan 22, 2019
An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42…
Jan 22, 2019
CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could…
Jan 22, 2019
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2018-19020 | When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a v… | MEDIUM | 0.83% | Feb 12, 2019 |
| CVE-2018-19018 | An access of uninitialized pointer vulnerability in CX-Supervisor (Versions 3.42 and prior) could lead to type confusion when processing project files. An atta… | HIGH | 1.16% | Feb 12, 2019 |
| CVE-2018-19015 | An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted p… | HIGH | 1.48% | Jan 28, 2019 |
| CVE-2018-19019 | A type confusion vulnerability exists when processing project files in CX-Supervisor (Versions 3.42 and prior). An attacker could use a specially crafted proje… | HIGH | 1.50% | Jan 22, 2019 |
| CVE-2018-19017 | Several use after free vulnerabilities have been identified in CX-Supervisor (Versions 3.42 and prior). When processing project files, the application fails to… | HIGH | 2.40% | Jan 22, 2019 |
| CVE-2018-19013 | An attacker could inject commands to delete files and/or delete the contents of a file on CX-Supervisor (Versions 3.42 and prior) through a specially crafted p… | MEDIUM | 0.75% | Jan 22, 2019 |
| CVE-2018-19011 | CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the p… | HIGH | 2.42% | Jan 22, 2019 |
Showing 1 to 7 of 7 CVEs