CVE-2018-17909

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.4.1.0 and prior

Description The issue arises when processing project files, where the application fails to check if it is referencing freed memory. This may allow an attacker to execute code under the context of the application. The vulnerability is related to the parsing of certain file types, including sr3, SCS, and PAG files.

Recommendations For Omron CX-Supervisor versions 3.4.1.0 and prior, update to a version that includes a fix for the use-after-free vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.