CVE-2018-19011 - AskarLabs CVE Database

CVE-2018-19011

Vendor Ics-Cert

Product CX-Supervisor

Weakness CWE-94 · Code injection

Published January 22, 2019

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application.

Key dates

02Disclosure timeline

January 22, 2019 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-19011 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/94.html

Related vulnerabilities

04Related CVE

CVE-2025-66224 OrangeHRM is Vulnerable to Code Execution Through Arbitrary File Write from Sendmail Parameter Injection CVE-2026-27495 n8n has a Sandbox Escape in its JavaScript Task Runner CVE-2026-8633 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins CVE-2025-62023 WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability CVE-2025-34079 NSClient++ Authenticated Remote Code Execution via ExternalScripts API