CVE-2018-19020

ICS-CERT / CX-Supervisor PUBLISHED

Description (CNA)

When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array.

Affected (CNA)

Vendor / product	Versions
ICS-CERT / CX-Supervisor	affected Versions 3.42 and prior

CWE

CWE-125

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01

ADP enrichment

CVE

No English description supplied.

https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01