CVE-2018-17909

7.8 highEPSS 1.6%

High (7.8) in omron cx-supervisor. EPSS 1.6% chance of exploitation in the next 30 days.

When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2018-11-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

omron:cx-supervisor

References

http://www.securityfocus.com/bid/105691
https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01
http://www.securityfocus.com/bid/105691
https://ics-cert.us-cert.gov/advisories/ICSA-18-290-01

Check your stack JSON