Back to Database
Status published
Medium
CVE-2019-6556
When processing project files, the application (Omron CX-Programmer v9.70 and...
Vulnerability Description
When processing project files, the application (Omron CX-Programmer v9.70 and prior and Common Components January 2019 and prior) fails to check if it is referencing freed memory. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-6556
Credits & Attribution
No credits recorded in the NVD database.
References
More from Omron
View All →CVE-2022-45794
Omron CJ-series and CS-series unauthenticated filesystem access.
High
8.6
CVE-2022-45793
Executable files writable by low-privileged users in Omron Sysmac Studio
Medium
5.5
CVE-2022-45792
Directory Traversal in Project File Format allows overwrite (Zip Slip)
High
7.8
CVE-2022-45790
Omron FINS memory protection susceptible to bruteforce
High
8.6
CVE-2022-2979
Omron CX-Programmer
High
7.8
Affected Vendor
Omron
View all reports →Affected Software
CX-Programmer within CX-One
Vulnerable Versions:
CX-Programmer v9.70 and prior and Common Components January 2019 and prior
Timeline
Official Publish:
April 10th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H