CVE-2018-17909: Use After Free
When processing project files in Omron CX-Supervisor Versions 3.4.1.0 and prior, the application fails to check if it is referencing freed memory, which may allow an attacker to execute code under the context of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17909?
CVE-2018-17909 is considered a critical vulnerability due to its potential to allow attackers to execute arbitrary code.
How do I fix CVE-2018-17909?
To fix CVE-2018-17909, upgrade to Omron CX-Supervisor version 3.4.2.0 or later.
What are the risks associated with CVE-2018-17909?
The risks associated with CVE-2018-17909 include unauthorized code execution and potential system compromise.
Which versions of Omron CX-Supervisor are affected by CVE-2018-17909?
CVE-2018-17909 affects Omron CX-Supervisor versions up to and including 3.4.1.0.
Is CVE-2018-17909 actively being exploited?
As of now, there are no public reports confirming active exploitation of CVE-2018-17909, but it remains a critical concern for affected systems.