A CVSS v3 base score of 6.6 has been assigned the CVSS vector string is ( AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H).
An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application.ĬVE-2019-6556 has been assigned to this vulnerability. When processing project files, the application fails to check if it is referencing freed memory. The following version of CX-Programmer within CX-One is affected: Successful exploitation of this vulnerability could allow an attacker to execute code under the privileges of the application.
