Description (CNA)
When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Omron / CX-Programmer within CX-One | affected CX-Programmer v9.70 and prior and Common Components January 2019 and prior |
CWE
CWE-416
References
- https://ics-cert.us-cert.gov/advisories/ICSA-19-094-01
- https://www.zerodayinitiative.com/advisories/ZDI-19-344/
ADP enrichment
No English description supplied.