CVE-2018-19020

5.0 mediumEPSS 0.8%

Medium (5.0) in omron cx-supervisor. EPSS 0.8% chance of exploitation in the next 30 days.

When CX-Supervisor (Versions 3.42 and prior) processes project files and tampers with the value of an offset, an attacker can force the application to read a value outside of an array.

Severity

CVSS 3.0

5.0 medium

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2019-02-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

omron:cx-supervisor

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01
https://ics-cert.us-cert.gov/advisories/ICSA-19-017-01

Check your stack JSON