Buffer Overflow Vulnerability in CX-Supervisor by Schneider Electric

CVE-2018-19020

What is CVE-2018-19020?

A buffer overflow vulnerability exists in CX-Supervisor, version 3.42 and earlier, that allows an attacker to manipulate project files. By tampering with an offset value, the attacker can cause the application to read beyond the boundaries of an array. This flaw could lead to unauthorized access to memory and result in various security issues, making it imperative for users to apply available patches and updates.

References