description: CX-Supervisor (Versions 3.42 and prior) can execute code that has been injected into a project file. An attacker could exploit this to execute code under the privileges of the application.
problem types: IMPROPER CONTROL OF GENERATION OF CODE ('CODE INJECTION') CWE-94
affected:
{
product: CX-Supervisor
vendor: ICS-CERT
versions:
status: affected, version: Versions 3.42 and prior
}